diff --git a/SECURITY.md b/SECURITY.md index 4f1859c..2220e9f 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,17 +2,18 @@ ## Supported Versions -Last stable version of MOSP always provides security updates. +Last stable version of the MOSP always provides security updates. There will be no security patches for other releases (tagged or not). ## Reporting a Vulnerability -If you think you have found a potential security issue in MOSP, do not open -directly a GitHub issue. Please email us. You can contact -[opensource@nc3.lu](mailto:opensource@nc3.lu). - -PGP fingerprint: D533 46C5 10C6 D5E9 81B3 1CD8 AB14 3B6C 5BD5 0BD3 +If you think you have found a potential security issue, do not open +directly a GitHub issue. +Please open a GitHub security advisory: +https://github.com/NC3-LU/MOSP/security +Or email us: +[opensource@nc3.lu](mailto:opensource@nc3.lu). You can also specify how you would like to be credited for your finding (commit message or release notes for the new release). We will