Update SECURITY.md

This commit is contained in:
Matthias Kerbl
2024-09-20 13:57:17 +02:00
committed by GitHub
parent ff48b9cc2f
commit 73b76a5f62

View File

@@ -2,20 +2,28 @@
## Supported Versions
Use this section to tell people about which versions of your project are
currently being supported with security updates.
| Version | Supported |
| ------- | ------------------ |
| 5.1.x | :white_check_mark: |
| 5.0.x | :x: |
| 4.0.x | :white_check_mark: |
| < 4.0 | :x: |
We release security updates for the latest version of **AlDente** here: https://github.com/AppHouseKitchen/AlDente-Charge-Limiter/releases
## Reporting a Vulnerability
Use this section to tell people how to report a vulnerability.
We take the security of our software seriously. If you discover a security vulnerability, we appreciate your help in disclosing it to us in a responsible manner.
Tell them where to go, how often they can expect to get an update on a
reported vulnerability, what to expect if the vulnerability is accepted or
declined, etc.
**How to Report**
- **Email:** Please send an email to [security@apphousekitchen.com](mailto:security@apphousekitchen.com).
- **Subject Line:** Use a clear and descriptive subject line, such as "Security Vulnerability in AlDente-Charge-Limiter".
- **Content:** Provide a detailed description of the vulnerability, including steps to reproduce it, the potential impact, and any suggested fixes.
**What to Expect**
- **Acknowledgment:** We will acknowledge receipt of your report within 48 hours.
- **Investigation:** Our team will investigate the issue and work on a fix.
- **Updates:** We will keep you informed about the progress of the investigation and remediation.
- **Disclosure:** Once the vulnerability is resolved, we will issue a patch and publicly disclose the issue, crediting you for the discovery if you wish.
**Guidelines**
- **Confidentiality:** Please do not disclose the vulnerability publicly until we have addressed it.
- **Legal:** You must not violate any laws or breach any agreements in the course of discovering and reporting vulnerabilities.
Thank you for helping us keep **AlDente** safe and secure for everyone!