From 27770b14be2fb27a439f1fe23194032988e950fa Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?George=20Guimar=C3=A3es?= Date: Tue, 15 Sep 2026 17:15:07 -0300 Subject: [PATCH] docs: Add a security policy Private vulnerability reporting is now enabled on the repository, so point reporters there. --- SECURITY.md | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..f5d0aa6 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,11 @@ +# Security Policy + +## Reporting a vulnerability + +Please report security issues privately through GitHub's private vulnerability reporting: open the [Security tab](https://github.com/sourcelevel/faraday-http-cache/security/advisories/new) of this repository and use "Report a vulnerability". Don't open a public issue or pull request for something you believe is a security problem. + +You'll get an acknowledgement within a week. If the report is accepted we'll work on a fix, publish a GitHub Security Advisory with credit to you, and release a fixed gem to RubyGems. + +## Supported versions + +Only the latest release on the 2.x line receives security fixes.