From d797dec4ce4605f5b48afca372f452c906d54b6f Mon Sep 17 00:00:00 2001 From: Andy Allan Date: Wed, 3 Aug 2022 17:06:18 +0100 Subject: [PATCH 1/1] Add a basic security policy. Fixes #3553 --- SECURITY.md | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 000000000..c1ad6e5ac --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,9 @@ +# Security Policy + +## Reporting a Vulnerability + +We welcome any reports of security vulnerabilities, and we will respond to you quickly to acknowledge receipt. + +To report a vulnerability please email [the maintainers using this link](mailto:tom@compton.nu;openstreetmap-website@gravitystorm.co.uk;security@openstreetmap.org). This will also notify the security team for the main deployment of this software. + +Please note that we do not offer any bug bounties and we do not participate in any bug programs. If your security report is validated by us, then we are happy to credit you publicly in our issue tracker, on request. -- 2.39.5