Security policy

A step of the Open source library tree on Gradus, in the Community area: Templates, conduct, security.

Publish how to report a vulnerability privately and which versions receive fixes.

Usually comes after: Issue and PR templates.

Prompt for your AI assistant

Add SECURITY.md stating which versions receive security fixes, how to report a vulnerability privately (a security advisory or a dedicated address) and the expected response time. Enable private vulnerability reporting on the repository if the host supports it.

• Show on map
• This step as Markdown
• Every step of the tree, for AI assistants

This is https://gradus.kazet.blog/tree/open-source-library/step/security-policy as plain HTML. In a browser the page also lets you mark the step forged and copy a message for your AI assistant.