Security.md - resilientdb - Git at Google


            
            <!--

            
             Licensed to the Apache Software Foundation (ASF) under one

            
             or more contributor license agreements.  See the NOTICE file

            
             distributed with this work for additional information

            
             regarding copyright ownership.  The ASF licenses this file

            
             to you under the Apache License, Version 2.0 (the

            
             "License"); you may not use this file except in compliance

            
             with the License.  You may obtain a copy of the License at


              http://www.apache.org/licenses/LICENSE-2.0


             Unless required by applicable law or agreed to in writing,

            
             software distributed under the License is distributed on an

            
             "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY

            
             KIND, either express or implied.  See the License for the

            
             specific language governing permissions and limitations

            
             under the License.

            
            -->


            # Security Policy


            ## Reporting a Vulnerability


            Please do not report security vulnerabilities through public GitHub issues.


            If you believe you have found a security vulnerability in Apache ResilientDB, please report it privately following the Apache Software Foundation security process:


            https://www.apache.org/security/


            If no project-specific private security address is available, reports may be sent to:


            security@apache.org


            Please include a clear description of the issue, affected versions or components, steps to reproduce if possible, and any suggested mitigation.


            The Apache Security Team and the Apache ResilientDB project community will coordinate handling of valid reports according to the ASF vulnerability handling process.
	<!--
	Licensed to the Apache Software Foundation (ASF) under one
	or more contributor license agreements. See the NOTICE file
	distributed with this work for additional information
	regarding copyright ownership. The ASF licenses this file
	to you under the Apache License, Version 2.0 (the
	"License"); you may not use this file except in compliance
	with the License. You may obtain a copy of the License at

	http://www.apache.org/licenses/LICENSE-2.0

	Unless required by applicable law or agreed to in writing,
	software distributed under the License is distributed on an
	"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
	KIND, either express or implied. See the License for the
	specific language governing permissions and limitations
	under the License.
	-->

	# Security Policy

	## Reporting a Vulnerability

	Please do not report security vulnerabilities through public GitHub issues.

	If you believe you have found a security vulnerability in Apache ResilientDB, please report it privately following the Apache Software Foundation security process:

	https://www.apache.org/security/

	If no project-specific private security address is available, reports may be sent to:

	security@apache.org

	Please include a clear description of the issue, affected versions or components, steps to reproduce if possible, and any suggested mitigation.

	The Apache Security Team and the Apache ResilientDB project community will coordinate handling of valid reports according to the ASF vulnerability handling process.