diff --git a/SECURITY.md b/SECURITY.md index 7fe71edd8..92aa33a5d 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -7,7 +7,7 @@ | Latest beta or release candidate | ✅ | | v0.9.x | ✅ | | v0.8.x | ✅ | -| < v0.9 | ❌ | +| < v0.8 | ❌ | ## Reporting a Vulnerability @@ -15,9 +15,9 @@ If you discover a security issue in this project, please DO NOT open an issue or There are two ways to privately report a security issue: -- Send an email to [help@kwil.com](mailto:help@kwil.com), which all code owners can access and check regularly. Tied to this email, you can use our [public key](https://keys.openpgp.org/search?q=help@kwil.com) to encrypt your message. +- Send an email to [help@kwil.com](mailto:help@kwil.com), which all code owners can access and check regularly. Tied to this email, you can use our [public key](https://keys.openpgp.org/search?q=help@kwil.com) to encrypt your message. -- Submit a report through GitHub's [private vulnerability reporting system](https://github.com/kwilteam/kwil-db/security/advisories/new). +- Submit a report through GitHub's [private vulnerability reporting system](https://github.com/kwilteam/kwil-db/security/advisories/new). Your report will be acknowledged within 24 hours, and you’ll receive a more detailed response to your report within 48 hours indicating the next steps in handling your report.