From 0972ef66969c7652a73c3d1d42ab151db5332fa4 Mon Sep 17 00:00:00 2001 From: Jeff Fredrickson Date: Thu, 1 Feb 2024 12:56:22 -0700 Subject: [PATCH] create security policy --- SECURITY.md | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 000000000..509e38743 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,27 @@ +# Security Policy + +As a U.S. Government agency, the General Services Administration (GSA) takes +seriously our responsibility to protect the public's information, including +financial and personal information, from unwarranted disclosure. + +Software developed by the U.S. General Services Administration (GSA) +is subject to the [GSA Vulnerability Disclosure Policy](https://gsa.gov/vulnerability-disclosure-policy). + +Please consult our policy for: +* How to submit a report if you believe you have discovered a vulnerability. +* GSA's coordinated disclosure policy. +* Information on how you may conduct security research on GSA-developed + software and systems. +* Important legal and policy guidelines. + +## Supported Versions + +Please note that only certain branches are supported with security updates. + +| Version (Branch) | Supported | +| ---------------- | ------------------ | +| master | :white_check_mark: | +| other | :x: | + +When using this code or reporting vulnerabilities please only use supported +versions.