zitadel-oidc/SECURITY.md
2019-11-15 15:02:12 +01:00

26 lines
900 B
Markdown
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# Security Policy
At @caos we are extremely grateful for security aware people that disclose vulnerabilities to us and the Open Source Community. All reports are thoroughly investigated by our engineering team.
## Supported Versions
After the initial Release the following version support will aplly
| Version | Supported |
| ------- | ------------------ |
| 1.x.x | :white_check_mark: (note yet available) |
| 0.x.x | :x: |
## Reporting a vulnerability
To file a incident, please disclose by email to security@caos.ch a list with the security details.
At the moment GPG encryption is no yet supported, however you may sign your message at will.
### When should I report a vulnerability?
### When should I NOT report a vulnerability?
## Security Vulnerability Response
## Public Disclosure Timing