This is an automated email from the ASF dual-hosted git repository.
fanningpj pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/hamilton.git
The following commit(s) were added to refs/heads/main by this push:
new f273c25a Update SECURITY.md (#1315)
f273c25a is described below
commit f273c25af7b38a297f2678a7fac00e1ff9104ffe
Author: PJ Fanning <[email protected]>
AuthorDate: Mon May 26 22:26:07 2025 +0100
Update SECURITY.md (#1315)
* Update SECURITY.md
* Update SECURITY.md
---
SECURITY.md | 25 ++++++++++++++++++++++---
1 file changed, 22 insertions(+), 3 deletions(-)
diff --git a/SECURITY.md b/SECURITY.md
index 199db8ac..d2541a0b 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -1,14 +1,33 @@
+<!--
+ Licensed to the Apache Software Foundation (ASF) under one or more
+ contributor license agreements. See the NOTICE file distributed with
+ this work for additional information regarding copyright ownership.
+ The ASF licenses this file to You under the Apache License, Version 2.0
+ (the "License"); you may not use this file except in compliance with
+ the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+-->
# Security Policy
-The security surface area of Hamilton should be pretty small in comparison to
other projects. But to get a better mark on Github, we're including this policy
file for completeness.
+The security surface area of Apache Hamilton should be pretty small in
comparison to other projects.
## Supported Versions
-We currently only support the latest version of Hamilton that's been released.
+We currently only support the latest version of Apache Hamilton that's been
released.
| Version | Supported |
| ------- | ------------------ |
| Latest | :white_check_mark: |
+
+This is a project of the [Apache Software Foundation](https://apache.org) and
follows the ASF [vulnerability handling
process](https://apache.org/security/#vulnerability-handling).
+
## Reporting a Vulnerability
-To report a vulnerability, use github's vulnerability reporting feature to
private flag an issue to contributors.
+To report a new vulnerability you have discovered please follow the [ASF
vulnerability reporting
process](https://apache.org/security/#reporting-a-vulnerability).
