Delete .github/SECURITY.md
Signed-off-by: Xikaro <os.valerievich@yandex.ru>
This commit is contained in:
parent
7655b0a5ce
commit
b422e4e82a
1 changed files with 0 additions and 42 deletions
42
.github/SECURITY.md
vendored
42
.github/SECURITY.md
vendored
|
|
@ -1,42 +0,0 @@
|
|||
# Security Policy
|
||||
|
||||
## Scope
|
||||
|
||||
Keeping users safe and secure is a top priority for us.We welcome the contribution of external security researchers.
|
||||
|
||||
If you believe you’ve found a security or vulnerability issue in the repo we encourage you to notify us.
|
||||
|
||||
There are no hard and fast rules to determine if a bug is worth reporting as a security issue or a “regular” issue.
|
||||
When in doubt, please do send us a report.
|
||||
|
||||
## How to submit a report
|
||||
|
||||
Security issues can be reported by sending an [email to us][contact].
|
||||
|
||||
The team will acknowledge your email within 48 hours. You will receive a more detailed response within 96 hours.
|
||||
|
||||
We will create a maintainer security advisory on GitHub to discuss internally, and when needed, invite you to the
|
||||
advisory.
|
||||
|
||||
## Purpose
|
||||
|
||||
- Make a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our
|
||||
services
|
||||
- Only interact with accounts you own or with explicit permission of the account holder. If you do encounter Personally
|
||||
Identifiable Information (PII) contact us immediately,
|
||||
do not proceed with access, and immediately purge any local information
|
||||
- Provide us with a reasonable amount of time to resolve vulnerabilities prior to any disclosure to the public or a
|
||||
third-party
|
||||
- We will consider activities conducted consistent with this policy to constitute “authorized” conduct and will not
|
||||
pursue civil action or initiate a complaint to law enforcement.
|
||||
We will help to the extent we can if legal action is initiated by a third party against you
|
||||
|
||||
Please submit a report to us before engaging in conduct that may be inconsistent with or unaddressed by this policy.
|
||||
|
||||
## Preferences
|
||||
|
||||
- Please provide detailed reports with reproducible steps and a clearly defined impact
|
||||
- Submit one vulnerability per report
|
||||
- Social engineering (such as phishing, vishing, smishing) is prohibited
|
||||
|
||||
[contact]: mailto:admin@terrafirmagreg.team
|
||||
Loading…
Add table
Add a link
Reference in a new issue