31 lines
1.1 KiB
Markdown
31 lines
1.1 KiB
Markdown
# Security Policy
|
|
|
|
## Supported Versions
|
|
|
|
Only the latest stable release of this project receives security updates. Older versions are not supported.
|
|
|
|
| Version | Supported |
|
|
| -------- | ------------------ |
|
|
| latest | :white_check_mark: |
|
|
| < latest | :x: |
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
If you discover a security vulnerability, please report it via [GitHub Security Advisories](https://github.com/asepharyana/asepharyana-hub/security/advisories).
|
|
|
|
Do **not** report security vulnerabilities via public GitHub issues.
|
|
|
|
Please include the following information in your report:
|
|
|
|
- A description of the vulnerability and the potential impact
|
|
- Steps to reproduce the issue
|
|
- The version(s) affected
|
|
- Any possible mitigations you have identified
|
|
|
|
## Disclosure Policy
|
|
|
|
- We will acknowledge receipt of your report within **48 hours**.
|
|
- We will investigate the issue and provide an estimated timeline for a fix.
|
|
- Once a fix is released, we will publish a security advisory and credit the reporter (if desired).
|
|
- We ask that you allow us **90 days** from the date of the report to release a fix before any public disclosure.
|