summaryrefslogtreecommitdiff
path: root/json4cpp/.github/SECURITY.md
diff options
context:
space:
mode:
Diffstat (limited to 'json4cpp/.github/SECURITY.md')
-rw-r--r--json4cpp/.github/SECURITY.md25
1 files changed, 25 insertions, 0 deletions
diff --git a/json4cpp/.github/SECURITY.md b/json4cpp/.github/SECURITY.md
new file mode 100644
index 0000000000..ea7e8810f3
--- /dev/null
+++ b/json4cpp/.github/SECURITY.md
@@ -0,0 +1,25 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+We value the security of our users and appreciate your efforts to responsibly disclose vulnerabilities. If you have
+identified a security vulnerability in this repository, please use the GitHub Security Advisory
+["Report a Vulnerability"](https://github.com/nlohmann/json/security/advisories/new) tab.
+
+Until it is published, this draft security advisory will only be visible to the maintainers of this project. Other
+users and teams may be added once the advisory is created.
+
+We will send a response indicating the next steps in handling your report. After the initial reply to your report, we
+will keep you informed of the progress towards a fix and full announcement and may ask for additional information or
+guidance.
+
+For vulnerabilities in third-party dependencies or modules, please report them directly to the respective maintainers.
+
+## Additional Resources
+
+- Explore security-related topics and contribute to tools and projects through
+ [GitHub Security Lab](https://securitylab.github.com/).
+- Learn more about responsible disclosure and reporting vulnerabilities in GitHub at
+ [About coordinated disclosure of security vulnerabilities](https://docs.github.com/en/code-security/repository-security-advisories/about-coordinated-disclosure-of-security-vulnerabilities).
+
+We sincerely thank you for contributing to the security and integrity of this project!