athenahr/SECURITY.md

65 lines
2.3 KiB
Markdown
Raw Normal View History

2020-09-08 17:32:56 +01:00
# Security Policy
2021-10-30 17:31:24 +01:00
## Supported Software Versions
2020-09-08 17:32:56 +01:00
The following versions are currently supported:
| Version | Supported |
|---------|--------------------|
2020-09-08 17:32:56 +01:00
| 0.1.x | :x: |
| 0.5.x | :x: |
2021-10-30 17:31:24 +01:00
| 0.6.x | :x: |
| 0.7.0 | :x: |
| 0.7.1 | :x: |
| 0.8.0 | :x: |
| 0.8.1 | :x: |
| 0.8.2 | :white_check_mark: |
| 0.9.0 | :white_check_mark: |
Please note that all current versions are pre-release versions. This means that, until version `1.0.0` is reached, anything may change or break at any time, and releases are made often.
However, all commits releases are thoroughly tested before they are pushed out, ensuring that the `main` branch is never broken.
2021-10-30 17:31:24 +01:00
## Supported PHP Versions
| Version | Supported |
|---------|--------------------|
2021-10-30 17:31:24 +01:00
| 5.x | :x: |
| 7.x | :x: |
2021-10-30 17:31:24 +01:00
| 8.0 | :white_check_mark: |
| 8.1 | :white_check_mark: |
2021-10-30 17:31:24 +01:00
## Supported Operating Systems
| Name | Supported |
| ------- | ------------------ |
| Windows NT | :x: |
| MacOS | Docker only |
| Ubuntu 22.10 | :white_check_mark: |
| Other Linux distros | :white_check_mark: |
2020-09-08 17:32:56 +01:00
## Reporting a Vulnerability
2021-10-30 17:31:24 +01:00
If you found a critical vunlerability, please do not use the Issues tab to report it.
Instead, please forward an encrypted vulnerability report to ``security@webvokestudio.pt``, so that we have time to open a security advisory and work on a fix.
Use this public PGP key to encrypt your message:
-----BEGIN PGP PUBLIC KEY BLOCK-----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=9azb
2021-10-30 17:31:24 +01:00
-----END PGP PUBLIC KEY BLOCK-----
2020-09-08 17:32:56 +01:00
2020-09-08 17:44:56 +01:00
You may use [this tool](https://pgptool.org/) to encrypt and sign your message.