Add security.md (#482)

* Create SECURITY.md Signed-off-by: Bert <[email protected]> * Update README.md Signed-off-by: Bert <[email protected]> --------- Signed-off-by: Bert <[email protected]>
Bertk · Nov 20, 2024 · 006ab9d · 006ab9d
1 parent d15deca
commit 006ab9d
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 4 deletions.
diff --git a/README.md b/README.md
@@ -15,13 +15,13 @@ Arcade-light is inspired from [dotnet/arcade](https://github.com/dotnet/arcade)
 
 ## nuget.org status
 
-![Nuget](https://img.shields.io/nuget/v/DotNetDev.ArcadeLight.Sdk)
-![Nuget](https://img.shields.io/nuget/dt/DotNetDev.ArcadeLight.Sdk)
+[![Nuget](https://img.shields.io/nuget/v/DotNetDev.ArcadeLight.Sdk)](https://www.nuget.org/packages/DotNetDev.ArcadeLight.Sdk)
+[![Nuget](https://img.shields.io/nuget/dt/DotNetDev.ArcadeLight.Sdk)](https://www.nuget.org/packages/DotNetDev.ArcadeLight.Sdk)
 
 ## GitHub actions
 
-![GitHub Workflow .NET Status (manual trigger)](https://img.shields.io/github/actions/workflow/status/Bertk/arcade-light/dotnet.yml?label=.NET)
+[![.NET](https://github.com/Bertk/arcade-light/actions/workflows/dotnet.yml/badge.svg)](https://github.com/Bertk/arcade-light/actions/workflows/dotnet.yml)
 
-![GitHub Workflow Status](https://img.shields.io/github/actions/workflow/status/Bertk/arcade-light/dotnet.yml?label=CodeQL)
+[![CodeQL](https://github.com/Bertk/arcade-light/actions/workflows/codeql.yml/badge.svg)](https://github.com/Bertk/arcade-light/actions/workflows/codeql.yml)
 
 [![Scorecard supply-chain security](https://github.com/Bertk/arcade-light/actions/workflows/scorecard.yml/badge.svg)](https://github.com/Bertk/arcade-light/actions/workflows/scorecard.yml)
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,14 @@
+# Security Policy
+
+## Supported Versions
+
+Only the latest version on [nuget.org](https://www.nuget.org/packages/DotNetDev.ArcadeLight.Sdk) will be considered for security updates.
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 1.7.x   | :white_check_mark: |
+| 1.6.x   | :x:                |
+
+## Reporting a Vulnerability
+
+Please contact maintainers using a direct message and provide similar content as od bug report.