Skip to content

Update SECURITY.md #12

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
albertompe merged 1 commit into from
Sep 8, 2025
Merged

Update SECURITY.md #12

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 2 additions & 9 deletions SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,16 +6,13 @@ If you discover a security vulnerability in this project, please report it to us

Please **do not** disclose the vulnerability publicly until we have had a chance to investigate and address it.

To report a vulnerability, please email us at:
[insert contact email or secure communication method]

If you prefer a different communication method, please let us know, and we will accommodate it.
To report a vulnerability, please use our [disclosure submission program](https://vdp.inditex.com).

## Security Updates

We are committed to fixing any security vulnerabilities discovered in the project. Once a report is received, we will:

1. Acknowledge the report within [insert timeframe, e.g., 48 hours].
1. Acknowledge the report within 48 hours.
2. Work to resolve the issue and release an appropriate patch.
3. Publicly disclose the details of the fix once it is available, while following responsible disclosure practices.

Expand All @@ -36,7 +33,3 @@ We recommend that contributors follow these security best practices when develop

As part of the responsibility for maintaining a secure environment, we ask that all contributors adhere to the project's Code of Conduct, ensuring that contributions do not introduce security risks or malicious behavior into the project.

## Attribution

This Security Policy is inspired by the [GitHub Security Policy Template](https://docs.github.com/en/github/managing-security-vulnerabilities/creating-a-security-policy) and other open-source best practices.