From 47a77e8af357b23b747bc49b1ff42eaeb0a28a97 Mon Sep 17 00:00:00 2001 From: Tom Kralidis Date: Tue, 3 Aug 2021 16:10:56 -0400 Subject: [PATCH 1/3] Create SECURITY.md --- SECURITY.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 000000000..f3696c25e --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,17 @@ +# pygeoapi Security Policy + +## Supported Versions + +Security/vulnerability reports **should not** be submitted through GitHub issues or public discussions, but instead please send your report +to **tomkralidis nospam @ gmail.com** (remove the blanks and ‘nospam’). + +Please follow the [contributor guidelines](https://github.com/geopython/pygeoapi/blob/master/CONTRIBUTING.md) when submitting a vulnerability report. + +## Supported Versions + +The pygeoapi Project Steering Committee (PSC) will release patches for security vulnerabilities for the following versions: + +| Version | Supported | +| ------- | ------------------ | +| 0.10.x | :white_check_mark: | +| < 0.10 | :x: | From 2b6aeadb85ba50c4aff8d5a4a68e909af7a13321 Mon Sep 17 00:00:00 2001 From: Tom Kralidis Date: Tue, 3 Aug 2021 16:20:12 -0400 Subject: [PATCH 2/3] Update SECURITY.md --- SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index f3696c25e..72931a0a3 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -3,7 +3,7 @@ ## Supported Versions Security/vulnerability reports **should not** be submitted through GitHub issues or public discussions, but instead please send your report -to **tomkralidis nospam @ gmail.com** (remove the blanks and ‘nospam’). +to **tomkralidis nospam @ gmail.com** (remove the blanks and 'nospam'). Please follow the [contributor guidelines](https://github.com/geopython/pygeoapi/blob/master/CONTRIBUTING.md) when submitting a vulnerability report. From e2f2065d217dc9dc90f567050ba0dcedfe748e1b Mon Sep 17 00:00:00 2001 From: Tom Kralidis Date: Mon, 9 Aug 2021 16:42:36 -0400 Subject: [PATCH 3/3] Update SECURITY.md --- SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index 72931a0a3..e36430ef8 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -3,7 +3,7 @@ ## Supported Versions Security/vulnerability reports **should not** be submitted through GitHub issues or public discussions, but instead please send your report -to **tomkralidis nospam @ gmail.com** (remove the blanks and 'nospam'). +to **geopython-security nospam @ lists.osgeo.org** (remove the blanks and 'nospam'). Please follow the [contributor guidelines](https://github.com/geopython/pygeoapi/blob/master/CONTRIBUTING.md) when submitting a vulnerability report.