summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--SECURITY.md19
1 files changed, 19 insertions, 0 deletions
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 000000000..6ca98a36e
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,19 @@
+# Security Policy
+
+## Supported Versions
+
+For the current supported version of SQLAlchemy, see "Current Release Series" at
+https://www.sqlalchemy.org/download.html#current.
+
+## Reporting a Vulnerability
+
+SQLAlchemy participates in the Tidelift security infrastructure for reporting
+potential vulnerabilities reponsibly. Please follow the guidelines at:
+
+https://tidelift.com/docs/security
+
+in order to report a security issue. Security-related issues in SQLAlchemy
+are extremely rare. Nevertheless, we would ask that you please do not file
+CVEs without emailing us first, so that proper disclosure steps may be taken.
+
+