chore: add SECURITY.md (#435)

eclipse-edc · Aug 26, 2024 · 41294dc · 41294dc
1 parent 04ac1d5
commit 41294dc
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,16 @@
+# Security Policy
+
+Eclipse Dataspace Components (EDC) follows
+the [Eclipse Vulnerability Reporting Policy](https://www.eclipse.org/security/policy.php). Vulnerabilities are tracked
+by the Eclipse security team, in cooperation with the EDC project lead. Fixing vulnerabilities is taken care of by the
+EDC project committers, with assistance and guidance of the security team.
+
+## Supported Versions
+
+Eclipse Dataspace Components supports security updates for the latest published release. Please refer to
+the [GitHub Releases page](https://github.com/eclipse-edc/IdentityHub/releases) to inspect the latest version.
+
+## Reporting a Vulnerability
+
+We recommend that in case of suspected vulnerabilities you do not use the EDC public issue tracker, but instead contact
+the Eclipse Security Team directly via [email protected].