Skip to content

Commit 8dbe0da

Browse files
authored
Revise security policy language for clarity
Updated language for clarity and consistency in the security policy.
1 parent 87ad670 commit 8dbe0da

1 file changed

Lines changed: 11 additions & 9 deletions

File tree

SECURITY.md

Lines changed: 11 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -2,13 +2,15 @@
22

33
## Supported Versions
44

5-
The following versions currently receive security updates:
5+
OpenVCS is experimental. However, responsible disclosure is appreciated, and I will triage reports as quickly as reasonably possible.
66

7-
| Version | Supported |
8-
| ------- | ------------------ |
9-
| Latest Stable | :white_check_mark: |
10-
| Pre-Releases | :x: |
11-
| Nightly | :x: |
7+
Security fixes are provided on a best-effort basis for the following:
8+
9+
| Version | Supported |
10+
| ------------- | ------------------ |
11+
| Latest release | :white_check_mark: |
12+
| Pre-releases | :x: |
13+
| Nightly | :x: |
1214

1315
> **Note**
1416
> Nightly and pre-release builds may contain fixes earlier, but are not considered supported security release channels.
@@ -19,8 +21,8 @@ Please report security vulnerabilities responsibly and **do not open public issu
1921

2022
Use GitHub’s private security advisories for this repository to report vulnerabilities.
2123

22-
We do not currently offer a bug bounty program.
24+
I do not currently offer a bug bounty program.
2325

24-
We aim to acknowledge reports within 72 hours.
26+
I aim to acknowledge reports within 72 hours.
2527

26-
We will respond as soon as reasonably possible and coordinate any fixes or disclosure as needed.
28+
I will respond as soon as reasonably possible and coordinate any fixes or disclosure as needed.

0 commit comments

Comments
 (0)