Create SECURITY.md

This commit is contained in:
Todd Gamblin 2021-09-19 06:43:14 -07:00 committed by GitHub
parent c2f42a6f09
commit 4f8b643404
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

24
SECURITY.md Normal file
View file

@ -0,0 +1,24 @@
# Security Policy
## Supported Versions
We provide security updates for the following releases.
For more on Spack's release structure, see
[`README.md`](https://github.com/spack/spack#releases).
| Version | Supported |
| ------- | ------------------ |
| develop | :white_check_mark: |
| 0.16.x | :white_check_mark: |
## Reporting a Vulnerability
To report a vulnerability or other security
issue, email maintainers@spack.io.
You can expect to hear back within two days.
If your security issue is accepted, we will do
our best to release a fix within a week. If
fixing the issue will take longer than this,
we will discuss timeline options with you.