tauri/SECURITY.md
Daniel Thompson-Yvetot 7bd6e0ddb1
feat(setup) .github and README
Signed-off-by: Daniel Thompson-Yvetot <denjell@quasar.dev>
2019-07-13 21:55:25 +02:00

35 lines
1.2 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# Security Policy
## Supported Versions
| Version | Supported |
| ------- | ------------------ |
| > 1.0 | :white_check_mark: |
| < 1.0 | :x: |
## Reporting a Vulnerability
If you have found a potential security threat, vulnerability or exploit in Quasar
or one of its upstream dependencies, please DONT create a pull-request, DONT
file an issue on GitHub, DONT mention it on Discord and DONT create a forum thread.
DO reach out to the team by sending an email to **security@quasar.dev** - we
will investigate and work with you to triage this issue and help you to report it
if appropriate.
If you like, you may use PGP to encrypt your messages, as the public key has been published at the pgp.mit.edu keyserver.
At the current time we do not have the financial ability to reward bounties, but in extreme cases will at our discretion consider a reward.
## Security Audit
You can apply to book the Quasar teams security experts to perform a Security Audit
for your project. Contact us to find out more about how to acquire, validate and publish
an official timestamped and version-locked audit badge.
`security@quasar.dev`
## Security Documentation
https://quasar.dev/security/