Add security policy (#12)

Signed-off-by: Igor Shishkin <me@teran.dev>
runityru · Jun 2, 2024 · b071a17 · b071a17
1 parent a852c7e
commit b071a17
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,14 @@
+# Security Policy
+
+## Supported Versions
+
+anycastd uses trunk-based development model with periodic semver releases marked
+against master branch right when the target feature is completed for particular
+milestone. Which means the most recent release is considered stable, secure and
+contains all the most recent features.
+
+## Reporting a Vulnerability
+
+To make a report please use GitHub security section and click "Report a vulnerability"
+button to fill details. Please don't forget to add anycastd version, Ceph version
+and any other related details to reproduce the issue.