libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases Packages Activity Actions

Create SECURITY.md

Browse source
This commit is contained in:
Stian Thorgersen 2020-04-30 10:46:49 +02:00 committed by Stian Thorgersen
parent 85feda3beb
commit c1be9adcde
1 changed files with 26 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
SECURITY.md Normal file
View file

@ -0,0 +1,26 @@
# Security Policy
## Supported Versions
To receive fixes for security vulnerabilities it is required to always upgrade to the latest version of Keycloak.
See https://www.keycloak.org/downloads for the latest release.
Fixes will only be released for previous releases under special circumstances.
## Reporting a Vulnerability
To report a security vulnerability:
You can report a security vulnerability either through email, or in our issue tracker. If you are uncertain what you have
discovered is a vulnerability or you believe it is a critical issue please report using email (or both).
To report through email send an email to keycloak-security@googlegroups.com.
To report through issue tracker:
* Go to https://issues.jboss.org/browse/KEYCLOAK
* Create a new issue in the Keycloak project
* Make sure the "This issue is security relevant" checkbox is checked
If you have a patch for the issue please use `git format-patch` and attach to the email or issue. Please do not open a
pull request on GitHub as that may disclose sensitive details around the vulnerability.