Public release release-be8720d92b1c
Source commit: be8720d92b1c2795f3e5903d8c1a65d70adfd095 Public tree identity: sha256:9503bb4414b023fea6500688ef0931a7f6b4c940c509fdf96c8bf3a8950e207c
This commit is contained in:
commit
3a697fa132
221 changed files with 81070 additions and 0 deletions
18
SECURITY.md
Normal file
18
SECURITY.md
Normal file
|
|
@ -0,0 +1,18 @@
|
|||
# Security reporting
|
||||
|
||||
## Supported versions
|
||||
|
||||
Security fixes are applied to the current main branch and the most recent
|
||||
published Clusterflux release. Older preview releases are not maintained.
|
||||
|
||||
## Report a vulnerability
|
||||
|
||||
Email security@michelpaulissen.com with a concise description, affected version
|
||||
or source revision, reproduction steps, and impact. Do not open a public issue
|
||||
for an unpatched vulnerability or include credentials, session tokens, private
|
||||
keys, provider tokens, customer data, or operator secrets in a public report.
|
||||
|
||||
You should receive an acknowledgement within three business days. We will
|
||||
coordinate validation, remediation, release timing, and disclosure with you.
|
||||
Avoid accessing data that is not yours, disrupting the hosted service, or
|
||||
retaining sensitive data beyond what is necessary to demonstrate the issue.
|
||||
Loading…
Add table
Add a link
Reference in a new issue