From ab96d22b61716e928cae12fe518f270a5f093093 Mon Sep 17 00:00:00 2001 From: Sviatoslav Sydorenko Date: Thu, 23 May 2019 21:48:58 +0200 Subject: [PATCH] =?UTF-8?q?=F0=9F=93=9D=20Add=20a=20GitHub-specific=20secu?= =?UTF-8?q?rity=20policy=20note?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit PR #56866 It'll show up at https://github.com/ansible/ansible/security/policy and will help us guide users to the proper docs page Co-authored-by: Alicia Cozine <879121+acozine@users.noreply.github.com> --- .github/SECURITY.md | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 .github/SECURITY.md diff --git a/.github/SECURITY.md b/.github/SECURITY.md new file mode 100644 index 00000000000..ce1aa8d5399 --- /dev/null +++ b/.github/SECURITY.md @@ -0,0 +1,15 @@ +# Security Policy + +## Supported Versions + +Ansible applies security fixes according to the 3-versions-back support +policy. Please find more information in [our docs]( +https://docs.ansible.com/ansible/devel/reference_appendices/release_and_maintenance.html#release-status +). + +## Reporting a Vulnerability + +We encourage responsible disclosure practices for security +vulnerabilities. Please read our [policies for reporting bugs]( +https://docs.ansible.com/ansible/devel/community/reporting_bugs_and_features.html#reporting-a-bug +) if you want to report a security issue that might affect Ansible.