create a Security Policy

[vjpixel]

Feature Request

Is your feature request related to a problem? Please describe.
We don't have a security policy.

Describe the solution you'd like
Create one, so it's easier for users to report vulnerabilities.

[KiSobral]

Hey, @vjpixel
@Bruno-Felix and I would like to be working on this issue. Is it free for us to take it?

[vjpixel]

Go ahead!

…

On Thu, Feb 17, 2022, 16:08 Hugo Sobral de Lima ***@***.***> wrote: Hey, @vjpixel <https://github.com/vjpixel> @Bruno-Felix <https://github.com/Bruno-Felix> and I would like to be working on this issue. Is it free for us to take it? — Reply to this email directly, view it on GitHub <#432 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAH4ULD5L2ZNSUQZQEXTSGTU3VBUJANCNFSM5AEQISTQ> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>. You are receiving this because you were mentioned.Message ID: ***@***.***>

[KiSobral]

@vjpixel we suggested using the github bug issue template as the default way to report vulnerability issues.
Is it appropriate or should we use another communication channel as the default reporting tool?

[vjpixel]

You can use it.

…

On Wed, Feb 23, 2022, 21:49 Hugo Sobral de Lima ***@***.***> wrote: @vjpixel <https://github.com/vjpixel> we suggested using the github bug issue template as the default way to report vulnerability issues. Is it appropriate or should we use another communication channel as the default reporting tool? — Reply to this email directly, view it on GitHub <#432 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAH4ULC23D7PJWPCLIT5D6LU4V6CTANCNFSM5AEQISTQ> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>. You are receiving this because you were mentioned.Message ID: ***@***.***>