From 0c623a45f42a6f3d528dc05ad78ebe7e2aeaed52 Mon Sep 17 00:00:00 2001 From: israel2606 Date: Mon, 29 Jun 2026 10:26:34 +0200 Subject: [PATCH 1/3] Create SECURITY.md --- SECURITY.md | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000000..034e848032 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,21 @@ +# Security Policy + +## Supported Versions + +Use this section to tell people about which versions of your project are +currently being supported with security updates. + +| Version | Supported | +| ------- | ------------------ | +| 5.1.x | :white_check_mark: | +| 5.0.x | :x: | +| 4.0.x | :white_check_mark: | +| < 4.0 | :x: | + +## Reporting a Vulnerability + +Use this section to tell people how to report a vulnerability. + +Tell them where to go, how often they can expect to get an update on a +reported vulnerability, what to expect if the vulnerability is accepted or +declined, etc. From 78889febda2dea107f963361fc6f0cddf58b5de4 Mon Sep 17 00:00:00 2001 From: israel2606 Date: Wed, 1 Jul 2026 00:16:03 +0200 Subject: [PATCH 2/3] Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- SECURITY.md | 12 ++++-------- 1 file changed, 4 insertions(+), 8 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index 034e848032..d38e15163a 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,15 +2,11 @@ ## Supported Versions -Use this section to tell people about which versions of your project are -currently being supported with security updates. +Security updates are provided through new releases of the VS Code extensions and library in this repository. -| Version | Supported | -| ------- | ------------------ | -| 5.1.x | :white_check_mark: | -| 5.0.x | :x: | -| 4.0.x | :white_check_mark: | -| < 4.0 | :x: | +Supported versions: +- The latest published releases are supported. +- Older releases may not receive security fixes; please upgrade to the latest version. ## Reporting a Vulnerability From 743c9dcc3aa9e0778ed6351eac2267fc5f0239da Mon Sep 17 00:00:00 2001 From: israel2606 Date: Wed, 1 Jul 2026 00:17:13 +0200 Subject: [PATCH 3/3] Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- SECURITY.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index d38e15163a..f77b7bbee0 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -10,8 +10,8 @@ Supported versions: ## Reporting a Vulnerability -Use this section to tell people how to report a vulnerability. +Please report security vulnerabilities **privately** via GitHub Security Advisories. -Tell them where to go, how often they can expect to get an update on a -reported vulnerability, what to expect if the vulnerability is accepted or -declined, etc. +Go to this repository’s **Security** tab and click **Report a vulnerability**. Do not open public issues for security reports. + +You can expect an initial response within 3 business days. If accepted, we will work with you on a fix and coordinate disclosure; if declined, we will provide a brief explanation.