Add SECURITY.md as recommended by GitHub (modelica#3674)

maltelenz · Dec 15, 2020 · 8d009bd · 8d009bd
1 parent 3b8db20
commit 8d009bd
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 1 deletion.
diff --git a/.gitattributes b/.gitattributes
@@ -31,9 +31,10 @@ ObsoleteModelica4.mo export-subst
 .CI export-ignore
 .gitattributes export-ignore
 .gitignore export-ignore
-CONTRIBUTING.md export-ignore
 .mailmap export-ignore
 .travis.yml export-ignore
+CONTRIBUTING.md export-ignore
+SECURITY.md export-ignore
 *.ipe export-ignore
 Modelica/Resources/Documentation/Clocked/Modelica_Synchronous.pptx export-ignore
 Modelica/Resources/Documentation/Fluid/Stream-Connectors-Overview-Rationale.ppt export-ignore

diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,15 @@
+# Security Policy
+
+## Supported Versions
+
+The following versions of the Modelica Standard Library are currently being supported with security updates.
+
+| Version       | Supported          |
+| ------------- | ------------------ |
+| 4.0.x         | :white_check_mark: |
+| 3.2.3+build.x | :white_check_mark: |
+| ≤ 3.2.2       | :x:                |
+
+## Reporting a Vulnerability
+
+If you discover a potential security issue in the Modelica Standard Library you can create a public GitHub issue.