Skip to content

[Repo] feat: Add security policy #20

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
finallyjay merged 1 commit into from
Apr 8, 2026
+29 −0
Merged

[Repo] feat: Add security policy #20

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 29 additions & 0 deletions SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
# Security Policy

## Reporting a Vulnerability

If you discover a security vulnerability in this project,
please report it responsibly.

**Do not open a public issue.** Instead, contact the
maintainer directly by email or through a
[private security advisory](https://github.com/finallyjay/selfhosted-docker-services/security/advisories/new).
Comment on lines +8 to +10
Copy link

Copilot AI Apr 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The policy instructs reporters to contact the maintainer “directly by email”, but no email address (or pointer to where to find it) is provided. This makes the guidance incomplete/confusing; either add a dedicated security contact email (or reference a contact location), or remove the email path and direct users solely to GitHub Private Vulnerability Reporting.

Copilot uses AI. Check for mistakes.

Please include:

- A description of the vulnerability
- Steps to reproduce the issue
- The affected service(s) and version(s)

You can expect an initial response within 72 hours.

## Scope

This policy applies to the Docker Compose configurations
and related files in this repository. Vulnerabilities in
upstream container images should be reported to their
respective maintainers.

## Supported Versions

Only the latest version on the `main` branch is supported.
Loading