diff --git a/docs/SECURITY.md b/docs/SECURITY.md index ed808bcbc88b7..9313321ce64d9 100644 --- a/docs/SECURITY.md +++ b/docs/SECURITY.md @@ -2,8 +2,8 @@ ## Supported Versions -This repository is built and tested against BYOND version `512.1485` at time of writing. If this version number is at odds with `BYOND_MAJOR`.`BYOND_MINOR` as defined in [`./github/workflows/test.yml`](https://github.com/Baystation12/Baystation12/blob/dev/.github/workflows/test.yml#L12), the Actions configuration should be considered authoritative and this document should be noted as out of date. Security vulnerabilities or exploits that apply to this version should be reported so that they can be closed. +This repository is built and tested against BYOND version `514.1585` at time of writing. If this version number is at odds with `BYOND_MAJOR`.`BYOND_MINOR` as defined in [`./github/workflows/test.yml`](https://github.com/Baystation12/Baystation12/blob/dev/.github/workflows/test.yml#L12), the Actions configuration should be considered authoritative and this document should be noted as out of date. Security vulnerabilities or exploits that apply to this version should be reported so that they can be closed. ## Reporting a Vulnerability -If you have been informed of or discovered a security vulnerability, exploit or other flaw, please contact a developer to report it privately. Public channels on Discord or the forums should be avoided, as the exploit may be taken from a public post and used before it can be patched. +If you have been informed of or discovered a security vulnerability, exploit or other flaw, please contact a developer to report it privately. Public channels on Discord or the forums should be avoided, as the exploit may be taken from a public post and used before it can be patched. The best method of contacting a developer is by pinging the `@dev` role in the discord's `#code` channel informing them there is a security issue you wish to report, and they will open a discord ticket to discuss the matter privately.