From f486793f4996da1f2dff5c8ab1495e2c033bc6b0 Mon Sep 17 00:00:00 2001 From: eriknordmark Date: Tue, 8 Sep 2026 23:05:39 +0200 Subject: [PATCH] Add SECURITY.md referencing EVE security policy This repository is part of the EVE project but carries no security policy of its own, so a researcher who lands here is offered no private reporting channel and no sign that one exists. Name the private channels the project already uses, and defer to the main EVE repository for supported versions, response timeline and the coordinated disclosure process, so the project keeps one authoritative policy rather than a divergent copy per repository. Signed-off-by: eriknordmark Co-Authored-By: Claude Opus 5 --- SECURITY.md | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 000000000000..7164dde5acbd --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,26 @@ +# Security Policy + +## Reporting a Vulnerability + +The EVE community takes security seriously. If you discover a security +issue, please bring it to our attention right away. + +Please DO NOT file a public issue. Report it privately instead, either by +email to [eve-security@lists.lfedge.org][mail] or through GitHub's +[private vulnerability reporting][gh-report] on the EVE repository. + +## Project-Wide Security Policy + +This repository is part of the EVE project and is covered by the +project-wide security policy maintained in the main EVE repository: + +- [SECURITY.md][policy] for supported versions, what to include in a + report, response timeline, and the coordinated disclosure process. +- [SECURITY-ARCHITECTURE.md][arch] for the EVE security model. +- [CONTRIBUTING.md][contrib] for contribution guidelines. + +[mail]: mailto:eve-security@lists.lfedge.org +[gh-report]: https://github.com/lf-edge/eve/security/advisories/new +[policy]: https://github.com/lf-edge/eve/blob/master/SECURITY.md +[arch]: https://github.com/lf-edge/eve/blob/master/docs/SECURITY-ARCHITECTURE.md +[contrib]: https://github.com/lf-edge/eve/blob/master/CONTRIBUTING.md