3 Commits

Author	SHA1	Message	Date
Sebastiaan van Stijn	dfe36fa226	touch-up security policy ... Slightly touch-up the security policy in this repository to describe the process in more details. - Describe process around reporting, triage, and review. - Describe timelines for acknowledging reports. - Refer to supported versions / branches. Some of this wording was adopted from containerd's policy, adjusting where needed (e.g. the project currently does not have an embargoed security announce list, and no formal definition of security advisors). Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-08-02 10:01:48 +02:00
Yong Tang	1d792e6bba	Update SECURITY.md to have an option to keep name anonymous if requested. ... Signed-off-by: Yong Tang <yong.tang.github@outlook.com>	2019-06-18 16:37:16 +00:00
andrea	0a9842a705	Create SECURITY.md for GitHub security policy page ... What would you like to be added: GitHub has a [security policy](https://github.com/moby/moby/security/policy) page that uses a SECURITY.md file from the repository to show the project's security policy. Why is this needed: Adding this file makes it easier for security researchers to learn about the correct place to report a vulnerability in the [Moby](https://github.com/moby/moby) project. Signed-off-by: Andrea <crypto.andrea@protonmail.ch>	2019-06-17 11:34:36 -05:00