Add a SECURITY.md file

sandstorm-io · Aug 12, 2021 · b239e7d · b239e7d
1 parent 36a6d46
commit b239e7d
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,9 @@
+# Security Policy
+
+## Supported Versions
+
+Sandstorm operates on an evergreen release model. Only the latest release is considered supported.
+
+## Reporting a Vulnerability
+
+Please report security vulnerabilities to [email protected] for responsible disclosure. We ask that you hold disclosure for at least 90 days from disclosure or 48 hours from patch release, whichever is shorter.