diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..9a3cbe2 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,12 @@ +## Reporting a Vulnerability + +If you identify a potential security vulnerability in this project, please adhere to the following guidelines to ensure it is handled responsibly: +1. **Do not disclose the vulnerability publicly.** Avoid creating a GitHub issue or sharing details in public forums to prevent exploitation before a fix is implemented. +2. **Contact us directly via email** at [OpenSourceSoftwareSecurity@geico.com](mailto:OpenSourceSoftwareSecurity@geico.com) with the following information: + - A detailed description of the vulnerability. + - Steps to reproduce the issue (if applicable). + - Any relevant logs, screenshots, or supporting data. + - Your contact information for follow-up (optional). +3. **Allow us sufficient time to address the issue.** We will acknowledge receipt of your report and work to resolve it as quickly as possible. +4. **Adhere to responsible disclosure practices.** Please refrain from publicly disclosing the issue until we confirm it has been mitigated. +We greatly appreciate your contribution to improving the security of this project.