diff options
Diffstat (limited to 'vendor/maennchen/zipstream-php/.github/SECURITY.md')
| -rw-r--r-- | vendor/maennchen/zipstream-php/.github/SECURITY.md | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/vendor/maennchen/zipstream-php/.github/SECURITY.md b/vendor/maennchen/zipstream-php/.github/SECURITY.md new file mode 100644 index 000000000..3046c3107 --- /dev/null +++ b/vendor/maennchen/zipstream-php/.github/SECURITY.md @@ -0,0 +1,22 @@ +# Security Policy + +[](https://github.com/ossf/oss-vulnerability-guide/blob/main/finder-guide.md) +[](https://github.com/maennchen/ZipStream-PHP/security/advisories/new) +[](mailto:jonatan@maennchen.ch) + +This repository follows the +[OpenSSF Vulnerability Disclosure guide](https://github.com/ossf/oss-vulnerability-guide/tree/main). +You can learn more about it in the +[Finders Guide](https://github.com/ossf/oss-vulnerability-guide/blob/main/finder-guide.md). + +Please report vulnerabilities via the +[GitHub Security Vulnerability Reporting](https://github.com/maennchen/ZipStream-PHP/security/advisories/new) +or via email to [`jonatan@maennchen.ch`](mailto:jonatan@maennchen.ch) if this does +not work for you. + +Our vulnerability management team will respond within 3 working days of your +report. If the issue is confirmed as a vulnerability, we will open a Security +Advisory. This project follows a 90 day disclosure timeline. + +If you have questions about reporting security issues, email the vulnerability +management team: [`jonatan@maennchen.ch`](mailto:jonatan@maennchen.ch) |