From 92a6c2ea0c5f6f26fb2be54814a4cea8ecc2cf2a Mon Sep 17 00:00:00 2001 From: Roger Barker Date: Thu, 17 Apr 2025 16:11:21 -0500 Subject: [PATCH] chore: Add security.md and .gitignore file Signed-off-by: Roger Barker --- .github/SECURITY.md | 36 ++++++++++++++++++++++++++++++++++++ .gitignore | 1 + 2 files changed, 37 insertions(+) create mode 100644 .github/SECURITY.md create mode 100644 .gitignore diff --git a/.github/SECURITY.md b/.github/SECURITY.md new file mode 100644 index 0000000..683b446 --- /dev/null +++ b/.github/SECURITY.md @@ -0,0 +1,36 @@ +# Security Policy + +## Reporting a Vulnerability + +We take the security of configure-custom-properties seriously. If you believe you have found a security vulnerability, please report it to us as described below. + +**Please do not report security vulnerabilities through public GitHub issues.** + +Instead, please report them via email to: + +``` +maintainers@pandaswhocode.com +``` + +You should receive a response within 48 hours. If for some reason you do not, please follow up via email to ensure we received your original message. + +Please include the following information in your report: + +- Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.) +- Full paths of source file(s) related to the manifestation of the issue +- The location of the affected source code (tag/branch/commit or direct URL) +- Any special configuration required to reproduce the issue +- Step-by-step instructions to reproduce the issue +- Proof-of-concept or exploit code (if possible) +- Impact of the issue, including how an attacker might exploit it + +## Preferred Languages + +We prefer all communications to be in English. + +## Policy + +- We will respond to your report within 48 hours with our evaluation and expected resolution time +- If you have followed the instructions above, we will not take legal action against you in regard to your report +- We will keep you informed of the progress towards resolving the issue +- Once the issue is resolved, we will publicly acknowledge your responsible disclosure, if you wish diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..485dee6 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.idea