Create SECURITY.md

Add a security disclosure policty document
This commit is contained in:
Oliver 2022-06-13 12:29:28 +10:00 committed by GitHub
parent 8b464e4397
commit 35b7d51cf2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

16
SECURITY.md Normal file
View File

@ -0,0 +1,16 @@
# Security Policy
The InvenTree team take all security vulnerabilities seriously. Thank you for improving the security of our open source software.
We appreciate your efforts and responsible disclosure and will make every effort to acknowledge your contributions.
## Reporting a Vulnerability
Please report security vulnerabilities by emailing the InvenTree team at:
```
security@inventree.org
```
Someone from the InvenTree development team will acknowledge your email as soon as possible, and indicate the next steps in handling your security report.
The team will endeavour to keep you informed of the progress towards a fix for the issue, and subsequent release to the stable and development code branches.