summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSebastian Thiel <sebastian.thiel@icloud.com>2022-02-12 11:55:57 +0800
committerGitHub <noreply@github.com>2022-02-12 11:55:57 +0800
commitd0b48f3f4888d69a7b59024114bff897f24561b2 (patch)
treef8e324a642e4bb1f5f34b443d4641bf258563938
parentcd29f07b2efda24bdc690626ed557590289d11a6 (diff)
downloadgitpython-d0b48f3f4888d69a7b59024114bff897f24561b2.tar.gz
Create SECURITY.md
-rw-r--r--SECURITY.md16
1 files changed, 16 insertions, 0 deletions
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..cf25c09e
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,16 @@
+# Security Policy
+
+## Supported Versions
+
+Only the latest version of GitPython can receive security updates. If a vulnerability is discovered, a fix can be issued in a new release, while older releases
+are likely to be yanked.
+
+| Version | Supported |
+| ------- | ------------------ |
+| 3.x.x | :white_check_mark: |
+| < 3.0 | :x: |
+
+## Reporting a Vulnerability
+
+Please report private portions of a vulnerability to sebastian.thiel@icloud.com that would help to reproduce and fix it. To receive updates on progress and provide
+general information to the public, you can create an issue [on the issue tracker](https://github.com/gitpython-developers/GitPython/issues).