diff --git a/SECURITY.md b/SECURITY.md index 95e108ea5..92aa33a5d 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -5,6 +5,7 @@ | Version | Supported | | ------- | --------- | | Latest beta or release candidate | ✅ | +| v0.9.x | ✅ | | v0.8.x | ✅ | | < v0.8 | ❌ | @@ -14,9 +15,9 @@ If you discover a security issue in this project, please DO NOT open an issue or There are two ways to privately report a security issue: -- Send an email to [help@kwil.com](mailto:help@kwil.com), which all code owners can access and check regularly. Tied to this email, you can use our [public key](https://keys.openpgp.org/search?q=help@kwil.com) to encrypt your message. +- Send an email to [help@kwil.com](mailto:help@kwil.com), which all code owners can access and check regularly. Tied to this email, you can use our [public key](https://keys.openpgp.org/search?q=help@kwil.com) to encrypt your message. -- Submit a report through GitHub's [private vulnerability reporting system](https://github.com/kwilteam/kwil-db/security/advisories/new). +- Submit a report through GitHub's [private vulnerability reporting system](https://github.com/kwilteam/kwil-db/security/advisories/new). Your report will be acknowledged within 24 hours, and you’ll receive a more detailed response to your report within 48 hours indicating the next steps in handling your report.