# Security Policy

## Supported Software Versions

The following versions are currently supported:

| Version      | Supported          |
|--------------|--------------------|
| 0.1.x        | :x:                |
| 0.5.x        | :x:                |
| 0.6.x        | :x:                |
| 0.7.0        | :x:                |
| 0.7.1        | :x:                |
| 0.8.0        | :x:                |
| 0.8.1        | :x:                |
| 0.8.2        | :x:                |
| 0.9.0        | :x:                |
| 1.0.0 onward | :white_check_mark: |


All versions below 1.0.0 are considered pre-release versions and therefore are not supported; this means they won't receive any security updates, nor will they receive regular maintenance updates.

Versions above v.1.0.0 are currently supported and will receive security and maintenance updates for at least 6 months from their release date. This table will be updated when releases are no longer supported. Additionally, some versions will be marked as LTS, which means they will continue receiving support for at least two years.

Long story short, if you're using something below 1.0.0, you're own your own!

## Supported PHP Versions

| Version | Supported          |
|---------|--------------------|
| 5.x     | :x:                |
| 7.x     | :x:                |
| 8.0     | :x:                |
| 8.1     | :white_check_mark: |

At the moment, only PHP versions 8.1 and above are officially supported.

## Supported Operating Systems

| Name    | Supported          |
| ------- |--------------------|
| Windows NT | Docker Only        |
| MacOS | Docker Only        |
| Ubuntu 22.10 | :white_check_mark: |
| Other Linux distros | :white_check_mark: |


## Reporting a Vulnerability

If you found a critical vunlerability, please do not use the Issues tab to report it.

Instead, please forward an encrypted vulnerability report to ``security@webvokestudio.pt``, so that we have time to open a security advisory and work on a fix.

Use this public PGP key to encrypt your message:

    -----BEGIN PGP PUBLIC KEY BLOCK-----

[encoded data, 7245 characters]
    /k925kCtzpT9dRpwmvccf9Hag36LItLzInt526MG
    =eyRs
    -----END PGP PUBLIC KEY BLOCK-----


You may use [this tool](https://pgptool.org/) to encrypt and sign your message.


## Using the Issue Tracker

This GitLab system is intended for internal use only, therefore, only authorized users may sign up and sign in via the currently configured idP integration. However, if you want to contribute to the project or submit a bug report, please feel free to request an account!

Account requests are granted regularly, though requests will be expedited/prioritised for users with their own email domain and users with an established GitLab/GitHub account.

To request an account, please follow the format below and send it to ``security@webvokestudio.pt``:

    Subject: Future Gamers GitLab Account Request - [Your Name]
    Body:
    
    Reason: I want an account because A and B
    GitLab/GitHub: https://gitlab.com/YourAccount OR https://github.com/YourAccount
