From db82148940c4533da7ca53ffbfce0d819460b33a Mon Sep 17 00:00:00 2001 From: lisagorewitdecker <50784106+lisagorewitdecker@users.noreply.github.com> Date: Sun, 16 Aug 2026 15:14:45 -0700 Subject: [PATCH 1/2] Create SECURITY.md for security policy Added a security policy document outlining supported versions and vulnerability reporting. --- SECURITY.md | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000000..034e848032 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,21 @@ +# Security Policy + +## Supported Versions + +Use this section to tell people about which versions of your project are +currently being supported with security updates. + +| Version | Supported | +| ------- | ------------------ | +| 5.1.x | :white_check_mark: | +| 5.0.x | :x: | +| 4.0.x | :white_check_mark: | +| < 4.0 | :x: | + +## Reporting a Vulnerability + +Use this section to tell people how to report a vulnerability. + +Tell them where to go, how often they can expect to get an update on a +reported vulnerability, what to expect if the vulnerability is accepted or +declined, etc. From d7f27e6ea88c5a4470ca6f00db04aba28e6826db Mon Sep 17 00:00:00 2001 From: lisagorewitdecker <50784106+lisagorewitdecker@users.noreply.github.com> Date: Sun, 16 Aug 2026 15:28:41 -0700 Subject: [PATCH 2/2] Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- SECURITY.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index 034e848032..55ee0c57b8 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,8 +2,7 @@ ## Supported Versions -Use this section to tell people about which versions of your project are -currently being supported with security updates. +Security fixes are provided for the default branch and for the latest published release. | Version | Supported | | ------- | ------------------ |