From 52977f0cdf056d6e698953edbae28a7583294e50 Mon Sep 17 00:00:00 2001 From: Joyce Date: Tue, 18 Oct 2022 21:15:30 -0300 Subject: [PATCH] Create Security Police (#8360) * chore: create security policy Signed-off-by: Joyce Brum * chore: only latest release on security police Signed-off-by: Joyce Brum * chore: security policy support on effort base Signed-off-by: Joyce Brum * Use dedicated e-mail address for security reporting Signed-off-by: Joyce Brum Co-authored-by: Philip Hyunsu Cho --- SECURITY.md | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 000000000..9e44b7e3c --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,22 @@ +# Security Policy + +## Supported Versions + + +Security updates are applied only to the most recent release. + +## Reporting a Vulnerability + + + +To report a security issue, please email +[security@xgboost-ci.net](mailto:security@xgboost-ci.net) +with a description of the issue, the steps you took to create the issue, +affected versions, and, if known, mitigations for the issue. + +All support will be made on the best effort base, so please indicate the "urgency level" of the vulnerability as Critical, High, Medium or Low.