diff --git a/SECURITY.md b/SECURITY.md index 2e8815a..15558f5 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,3 +1,28 @@ -For all security related bugs, email security@ansible.com instead of using this issue tracker and you will receive a prompt response. +# Security Policy -For more information on the Ansible community's practices regarding responsible disclosure, see https://www.ansible.com/security +## Supported Versions + +| Version | Supported | +| ------- | ------------------ | +| 25.x | :white_check_mark: | +| < 25.0 | :x: | + +## Reporting a Vulnerability + +If you discover a security vulnerability in this project, please report it +responsibly. **Do not open a public GitHub issue for security vulnerabilities.** + +Instead, please send an email to **security@ctrliq.com** with: + +- A description of the vulnerability +- Steps to reproduce the issue +- Any potential impact + +You should receive a response within 72 hours acknowledging receipt. We will +work with you to understand the issue and coordinate a fix and disclosure +timeline. + +## Disclosure Policy + +We follow coordinated disclosure. We ask that you give us a reasonable amount +of time to address the issue before making any information public.