Create SECURITY.md

This commit is contained in:
Max Lee 2019-05-26 17:16:10 +01:00 committed by GitHub
parent 26daa4531d
commit cef571223e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

27
SECURITY.md Normal file
View File

@ -0,0 +1,27 @@
# Security Policy
## Supported Versions
Overview over versions of ChestShop that are currently being actively developed
and which ones are supported with security updates if necessary.
| Version | Active development | Security Fixes |
| ------------- | ------------------ | ------------------ |
| 3.10 (latest) | :heavy_check_mark: | :heavy_check_mark: |
| < 3.10 | :x: | :x: |
| 3.9.3-1.12 | :x: | :heavy_check_mark: |
| 3.9.2-1.8.8 | :x: | :heavy_check_mark: |
Updates for the different versions can be found on the [build server](https://ci.minebench.de/job/ChestShop-3/),
only the latest version will get releases on the main project pages.
## Reporting a Vulnerability
If you want to report an issue which might pose a security risk then
you can do this in private at the following locations:
- [Start a conversation](https://www.spigotmc.org/conversations/add?to=Phoenix616&title=ChestShop%20Vulnerability) with Phoenix616 on SpigotMC.org
- Message phoenix616 on the [SpigotMC IRC network](https://irc.spi.gt/) (irc.spi.gt)
- Message phoenix616 on the [Esper.net IRC network](https://esper.net)
For issues that do not have security implications please [open an issue](https://github.com/ChestShop-authors/ChestShop-3/issues/new/choose).