-
-
Notifications
You must be signed in to change notification settings - Fork 54
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
2 changed files
with
26 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,25 @@ | ||
# Security Policy | ||
|
||
## Supported Versions | ||
|
||
The following table outlines which versions of Fuego are actively supported with security updates. Please ensure that you are using a supported version to benefit from the latest patches and improvements. | ||
|
||
| Version | Supported | | ||
| ----------------------------------------------- | ---------------------- | | ||
| 0.x.y (x being the latest version released) | :white_check_mark: Yes | | ||
| 0.x.y (x being NOT the latest version released) | :x: No | | ||
|
||
## Reporting a Vulnerability | ||
|
||
Fuego relies on its community to ensure its security. Here is how to report a vulnerability: | ||
|
||
1. **Send a Pull Request (PR):** If possible, immediately send a PR addressing the vulnerability and tag the maintainers for a quick review. | ||
2. **Dependency Issues:** For supply chain or dependency-related vulnerabilities, update the all modules with `make check-all-modules` and submit a PR. | ||
3. **Direct Contact:** If you cannot send a PR or the issue requires further discussion, please contact the maintainers directly by email. | ||
|
||
### Important Notes | ||
|
||
- Please do not publicly disclose the vulnerability until it has been addressed and patched. | ||
- We are committed to transparency and will publicly acknowledge reporters in the release notes unless requested otherwise. | ||
|
||
Your cooperation helps ensure Fuego remains a secure and reliable framework for everyone. |