summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorxuri <xuri.me@gmail.com>2019-09-25 11:12:16 +0800
committerGitHub <noreply@github.com>2019-09-25 11:12:16 +0800
commit475fbf3856dd83c4813874570ae5ae2cb48ed421 (patch)
tree47d64a333e6a52607a275fd1f69926c10e0a712e
parenta34d3b8c86d67d3ad0bc0dbedb69d3b4ebbc210f (diff)
Create SECURITY.md
-rw-r--r--SECURITY.md9
1 files changed, 9 insertions, 0 deletions
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..9d032de
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,9 @@
+# Security Policy
+
+## Supported Versions
+
+We will dive into any security-related issue as long as your Excelize version is still supported by us. When reporting an issue, include as much information as possible, but no need to fill fancy forms or answer tedious questions. Just tell us what you found, how to reproduce it, and any concerns you have about it. We will respond as soon as possible and follow up with any missing information.
+
+## Reporting a Vulnerability
+
+Please e-mail us directly at `xuri.me@gmail.com` or use the security issue template on GitHub. In general, public disclosure is made after the issue has been fully identified and a patch is ready to be released. A security issue gets the highest priority assigned and a reply regarding the vulnerability is given within a typical 24 hours. Thank you!