From d217a3f15df87a0ec6a7786b812de99387ef82d0 Mon Sep 17 00:00:00 2001 From: maximilien Date: Mon, 27 Apr 2026 07:33:27 +0000 Subject: [PATCH] add SECURITY.md (#1423) Add some instructions to report security issues with garage. Reviewed-on: https://git.deuxfleurs.fr/Deuxfleurs/garage/pulls/1423 --- SECURITY.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..6a7785dc --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,14 @@ +# Security Reporting + +If you wish to report responsibly a security vulnerability about Garage, we ask that you follow the following process. + +Please report each security vulnerabilities by filling out the following template: + +- PROJECT: A URL to the code repository containing the vulnerable version - be reminded that the source of truth is at https://git.deuxfleurs.fr/deuxfleurs/garage +- PUBLIC: Please let us know if this vulnerability has been made or discussed publicly already, and if so, please let us know where. +- DESCRIPTION: Please provide precise description of the security vulnerability you have found with as much information as you are able and willing to provide. + +Please send the above info, along with any other information you feel is pertinent by emailing the core team at: garagehq@deuxfleurs.fr + +The Garage Core Team will let you know within a few weeks whether or not your report has been accepted or rejected. +We ask that you please keep the report confidential until we have either responded or made a public announcement.