mirror of
https://github.com/anchore/syft.git
synced 2025-11-17 08:23:15 +01:00
33 lines
1.1 KiB
Markdown
33 lines
1.1 KiB
Markdown
# Security Policy
|
|
|
|
## Supported Versions
|
|
|
|
<!-- Use this section to tell people about which versions of your project are
|
|
currently being supported with security updates.
|
|
|
|
| Version | Supported |
|
|
| ------- | ------------------ |
|
|
| 5.1.x | :white_check_mark: |
|
|
| 5.0.x | :x: |
|
|
| 4.0.x | :white_check_mark: |
|
|
| < 4.0 | :x: |
|
|
|
|
-->
|
|
|
|
Security updates are applied only to the most recent release, try to always be up to date.
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
<!-- Use this section to tell people how to report a vulnerability.
|
|
|
|
Tell them where to go, how often they can expect to get an update on a
|
|
reported vulnerability, what to expect if the vulnerability is accepted or
|
|
declined, etc. -->
|
|
|
|
To report a security issue, please email
|
|
[security@anchore.com](mailto:security@anchore.com)
|
|
with a description of the issue, the steps you took to create the issue,
|
|
affected versions, and, if known, mitigations for the issue.
|
|
|
|
All support will be made on a best effort basis, so please indicate the "urgency level" of the vulnerability as Critical, High, Medium or Low.
|