Add a basic security policy.

Fixes #3553
This commit is contained in:
Andy Allan 2022-08-03 17:06:18 +01:00
parent 6b69655812
commit d797dec4ce

9
SECURITY.md Normal file
View file

@ -0,0 +1,9 @@
# Security Policy
## Reporting a Vulnerability
We welcome any reports of security vulnerabilities, and we will respond to you quickly to acknowledge receipt.
To report a vulnerability please email [the maintainers using this link](mailto:tom@compton.nu;openstreetmap-website@gravitystorm.co.uk;security@openstreetmap.org). This will also notify the security team for the main deployment of this software.
Please note that we do not offer any bug bounties and we do not participate in any bug programs. If your security report is validated by us, then we are happy to credit you publicly in our issue tracker, on request.