From e3f72d83e4cba90abf11c0789e0fa88a71e970a8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?David=20Rodr=C3=ADguez?= Date: Tue, 1 Dec 2020 13:28:13 +0100 Subject: [PATCH 1/3] Move security information to a SECURITY.md file Since it integrates best with Github. --- .github/SECURITY.md | 7 +++++++ README.md | 6 ------ 2 files changed, 7 insertions(+), 6 deletions(-) create mode 100644 .github/SECURITY.md diff --git a/.github/SECURITY.md b/.github/SECURITY.md new file mode 100644 index 0000000..f128429 --- /dev/null +++ b/.github/SECURITY.md @@ -0,0 +1,7 @@ +# Security Policy + +## Security contact information + +Please use the Tidelift security contact to [report a security +vulnerability](https://tidelift.com/security). Tidelift will coordinate the fix +and disclosure. diff --git a/README.md b/README.md index 6201bfa..1727453 100644 --- a/README.md +++ b/README.md @@ -891,12 +891,6 @@ both in the same application. If both are present, Ransack will default to Active Record only. The logic is contained in `Ransack::Adapters#instantiate_object_mapper` should you need to override it. -## Security contact information - -Please use the Tidelift security contact to [report a security -vulnerability](https://tidelift.com/security). Tidelift will coordinate the fix -and disclosure. - ## Semantic Versioning Ransack attempts to follow semantic versioning in the format of `x.y.z`, where: From e3cbc19da7d5119ccc78a56a2f12fd9f4bafcc6f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?David=20Rodr=C3=ADguez?= Date: Tue, 1 Dec 2020 13:30:43 +0100 Subject: [PATCH 2/3] Improve section naming --- .github/SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/SECURITY.md b/.github/SECURITY.md index f128429..caef0d4 100644 --- a/.github/SECURITY.md +++ b/.github/SECURITY.md @@ -1,6 +1,6 @@ # Security Policy -## Security contact information +## Reporting a Vulnerability Please use the Tidelift security contact to [report a security vulnerability](https://tidelift.com/security). Tidelift will coordinate the fix From edebcc359e3b8ed86c7568b25776be3857eff391 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?David=20Rodr=C3=ADguez?= Date: Tue, 1 Dec 2020 13:30:55 +0100 Subject: [PATCH 3/3] Add another section about support versions --- .github/SECURITY.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/SECURITY.md b/.github/SECURITY.md index caef0d4..90408e4 100644 --- a/.github/SECURITY.md +++ b/.github/SECURITY.md @@ -1,5 +1,10 @@ # Security Policy +## Supported Versions + +At the moment, only the latest major.minor release stream is supported with +security updates. + ## Reporting a Vulnerability Please use the Tidelift security contact to [report a security