Merge pull request #33 from ModMaker101/development

Update SECURITY.md

SECURITY.md

@@ -1,8 +1,55 @@
-| Version | Supported          | Mc Version Supported |
-| ------- | ------------------ |---------|
-|  1.2.5.1  | :heavy_check_mark: | 1.20.51 |
-|  1.2.5  | :heavy_check_mark: | 1.20.82 |
+# Security Policy
 
-Warnings
+## Supported Versions
 
-- any version before 1.2.4 is not supported but they work for the older version of minecraft
+We actively support the following versions of the Minecraft Bedrock Naruto mod. Please ensure you're using a supported version to receive the latest security updates.
+
+| Version | Supported          | MC Version Supported |
+| ------- | ------------------ | -------------------- |
+| 1.2.5.1 | :heavy_check_mark: | 1.21.x               |
+| 1.2.5   | :heavy_check_mark: | 1.20.82              |
+
+## Warnings
+
+- Any version before 1.2.4 is not supported, but they work for the older versions of Minecraft.
+
+## Reporting a Vulnerability
+
+We take the security of our mod seriously. If you discover any security issues, please report them to us as follows:
+
+### How to Report
+
+1. **Email:** Send an email to [ccloudanimefan@gmail.com](mailto:ccloudanimefan@gmail.com) with the subject line "Security Vulnerability Report".
+2. **Include Details:** Provide detailed information about the vulnerability, including steps to reproduce, potential impact, and any relevant code snippets or logs.
+3. **Expectation:** We will keep you updated on our progress towards resolving the issue as we work on it.
+
+### Guidelines
+
+- **Do Not Publicly Disclose:** Please do not publicly disclose the vulnerability until we have addressed it and released a patch.
+- **Proof of Concept:** If possible, include a proof of concept to help us understand and reproduce the issue.
+- **Responsible Disclosure:** We appreciate your help in keeping our mod secure and will acknowledge your contribution once the issue is resolved.
+
+## Response Process
+
+1. **Initial Response:** We will acknowledge receipt of your report and provide an initial assessment as soon as possible.
+2. **Investigation:** We will investigate the issue and work on a fix. This may involve asking you for additional information or clarifications.
+3. **Resolution:** Once a fix is developed, we will test it thoroughly and release an updated version of the mod.
+4. **Disclosure:** After the fix is released, we will publicly disclose the vulnerability and credit you for your responsible disclosure (if you wish to be credited).
+
+## Note on Updates
+
+While we strive to address security issues promptly, please be aware that updates may not be immediate due to other commitments. Your patience and understanding are appreciated.
+
+## Disclaimer
+
+We are not responsible for any broken Minecraft Bedrock worlds or servers caused by the use of this mod. Use it at your own risk.
+
+## Security Best Practices
+
+To help keep your environment secure while using our mod, we recommend the following best practices:
+
+- **Keep Software Updated:** Always use the latest version of Minecraft Bedrock Edition and our mod.
+- **Regular Backups:** Regularly back up your game data to prevent loss in case of any issues.
+- **Use Trusted Sources:** Download the mod only from our official GitHub repository to avoid malicious modifications.
+
+Thank you for helping us maintain the security and integrity of the Minecraft Bedrock Naruto mod.