diff --git a/SECURITY.md b/SECURITY.md index e0546a1..16433e6 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,8 +1,55 @@ -| Version | Supported | Mc Version Supported | -| ------- | ------------------ |---------| -| 1.2.5.1 | :heavy_check_mark: | 1.20.51 | -| 1.2.5 | :heavy_check_mark: | 1.20.82 | +# Security Policy -Warnings +## Supported Versions -- any version before 1.2.4 is not supported but they work for the older version of minecraft +We actively support the following versions of the Minecraft Bedrock Naruto mod. Please ensure you're using a supported version to receive the latest security updates. + +| Version | Supported | MC Version Supported | +| ------- | ------------------ | -------------------- | +| 1.2.5.1 | :heavy_check_mark: | 1.21.x | +| 1.2.5 | :heavy_check_mark: | 1.20.82 | + +## Warnings + +- Any version before 1.2.4 is not supported, but they work for the older versions of Minecraft. + +## Reporting a Vulnerability + +We take the security of our mod seriously. If you discover any security issues, please report them to us as follows: + +### How to Report + +1. **Email:** Send an email to [ccloudanimefan@gmail.com](mailto:ccloudanimefan@gmail.com) with the subject line "Security Vulnerability Report". +2. **Include Details:** Provide detailed information about the vulnerability, including steps to reproduce, potential impact, and any relevant code snippets or logs. +3. **Expectation:** We will keep you updated on our progress towards resolving the issue as we work on it. + +### Guidelines + +- **Do Not Publicly Disclose:** Please do not publicly disclose the vulnerability until we have addressed it and released a patch. +- **Proof of Concept:** If possible, include a proof of concept to help us understand and reproduce the issue. +- **Responsible Disclosure:** We appreciate your help in keeping our mod secure and will acknowledge your contribution once the issue is resolved. + +## Response Process + +1. **Initial Response:** We will acknowledge receipt of your report and provide an initial assessment as soon as possible. +2. **Investigation:** We will investigate the issue and work on a fix. This may involve asking you for additional information or clarifications. +3. **Resolution:** Once a fix is developed, we will test it thoroughly and release an updated version of the mod. +4. **Disclosure:** After the fix is released, we will publicly disclose the vulnerability and credit you for your responsible disclosure (if you wish to be credited). + +## Note on Updates + +While we strive to address security issues promptly, please be aware that updates may not be immediate due to other commitments. Your patience and understanding are appreciated. + +## Disclaimer + +We are not responsible for any broken Minecraft Bedrock worlds or servers caused by the use of this mod. Use it at your own risk. + +## Security Best Practices + +To help keep your environment secure while using our mod, we recommend the following best practices: + +- **Keep Software Updated:** Always use the latest version of Minecraft Bedrock Edition and our mod. +- **Regular Backups:** Regularly back up your game data to prevent loss in case of any issues. +- **Use Trusted Sources:** Download the mod only from our official GitHub repository to avoid malicious modifications. + +Thank you for helping us maintain the security and integrity of the Minecraft Bedrock Naruto mod.