From ac058fcd2aa87f91d404481c5201b2830cd8918f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fran=C3=A7ois=20Schmidts?= Date: Sat, 9 Jul 2022 08:15:30 +0200 Subject: [PATCH] Add security instruction for #202 --- README.md | 4 ++++ SECURITY.md | 5 +++++ 2 files changed, 9 insertions(+) create mode 100644 SECURITY.md diff --git a/README.md b/README.md index 14d46d929..6ce2b8c70 100644 --- a/README.md +++ b/README.md @@ -21,6 +21,10 @@ You can use the instance of JARR run by the maintainer on [app.jarr.info](https: To use and host your own instance of JARR please see [installation instruction](https://github.com/jaesivsm/JARR/blob/master/INSTALL.md) +## Security + +Please refer to the [security instruction](https://github.com/jaesivsm/JARR/blob/master/SECURITY.md). + ## License JARR is under the [GNU Affero General Public License version 3](https://www.gnu.org/licenses/agpl-3.0.html). diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 000000000..0cf121b24 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,5 @@ +# Reporting security issues + +For common issues the recommended way is to open a [Pull Request](https://github.com/jaesivsm/JARR/issues/new). + +For security issues related to either JARR itself or its [main instance](https://app.jarr.info), the best way is to contact [the main maintenaner by mail](mailto:contact@jarr.info).