|
5 | 5 | Security fixes are applied to the latest stable release only. |
6 | 6 |
|
7 | 7 | | Version | Supported | |
8 | | -|---------|-----------| |
9 | | -| Latest | Yes | |
10 | | -| Older | No | |
| 8 | +| --- | --- | |
| 9 | +| Latest | Yes | |
| 10 | +| Older | No | |
11 | 11 |
|
12 | 12 | ## Reporting a Vulnerability |
13 | 13 |
|
14 | | -If you discover a security vulnerability, **please do not open a public issue**. |
| 14 | +If you discover a security vulnerability, do not open a public issue. |
15 | 15 |
|
16 | | -Instead, report it privately by: |
| 16 | +Report it privately by using GitHub Security Advisories: |
17 | 17 |
|
18 | | -1. Going to the [Security Advisories](https://github.com/SzaBee13/dev-tools-ps/security/advisories/new) page and submitting a private advisory, **or** |
19 | | -2. Contacting the maintainer directly through GitHub. |
| 18 | +- https://github.com/SzaBee13/dev-tools-ps/security/advisories/new |
| 19 | + |
| 20 | +If that is not possible, contact the maintainer through GitHub and share details privately. |
20 | 21 |
|
21 | 22 | Please include: |
22 | 23 |
|
23 | | -- A description of the vulnerability and its potential impact |
24 | | -- Steps to reproduce or a proof-of-concept |
25 | | -- Any suggested mitigations if known |
| 24 | +- A clear description of the vulnerability and impact |
| 25 | +- Steps to reproduce (or a proof-of-concept) |
| 26 | +- Any suggested mitigations or patches |
| 27 | + |
| 28 | +Response target: |
26 | 29 |
|
27 | | -You can expect an acknowledgement within **72 hours** and a resolution or status update within **14 days**. |
| 30 | +- Acknowledgement within 72 hours |
| 31 | +- Status update or remediation plan within 14 days |
28 | 32 |
|
29 | 33 | ## Scope |
30 | 34 |
|
31 | | -This policy covers the PowerShell source files in `src/`, the Chrome extension in `chrome-extension/`, and the native host scripts. The documentation website (`web/`) is a static site with no user authentication or data storage. |
| 35 | +This policy covers: |
| 36 | + |
| 37 | +- PowerShell source files in `src/` |
| 38 | +- Chrome extension code in `chrome-extension/` |
| 39 | +- Native host scripts in `chrome-extension/native-host/` |
| 40 | +- Packaging scripts in `chocolatey/` and `inno/` |
| 41 | + |
| 42 | +The documentation website in `web/` is static and has no user authentication or server-side data storage. |
0 commit comments