From: Barry Dorrans Date: Tue, 28 May 2019 22:21:46 +0000 (-0700) Subject: Creating common security policy X-Git-Tag: submit/tizen/20210909.063632~11031^2~1485 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=56183da1781f2633ee8c290c3fb6e7066e553d34;p=platform%2Fupstream%2Fdotnet%2Fruntime.git Creating common security policy Commit migrated from https://github.com/dotnet/corefx/commit/c0629b395e8cfe632fcf1bd75e9de1a02cbb514c --- diff --git a/src/libraries/SECURITY.md b/src/libraries/SECURITY.md new file mode 100644 index 0000000..92d0527 --- /dev/null +++ b/src/libraries/SECURITY.md @@ -0,0 +1,15 @@ +# Security Policy + +## Supported Versions + +The .NET Core and ASP.NET Core support policy, including supported versions can be found at the [.NET Core Support Policy Page](https://dotnet.microsoft.com/platform/support/policy/dotnet-core). + +## Reporting a Vulnerability + +Security issues and bugs should be reported privately, via email, to the Microsoft Security Response Center (MSRC) secure@microsoft.com. +You should receive a response within 24 hours. If for some reason you do not, please follow up via email to ensure we received your +original message. Further information, including the MSRC PGP key, can be found in the [Security TechCenter](https://technet.microsoft.com/en-us/security/ff852094.aspx). + +Reports via MSRC may qualify for the .NET Core Bug Bounty. Details of the .NET Core Bug Bounty including terms and conditions are at [https://aka.ms/corebounty](https://aka.ms/corebounty). + +Please do not open issues for anything you think might have a security implication.