add security info

AliyunContainerService · Apr 16, 2024 · 0a60fea · 0a60fea
1 parent 1446303
commit 0a60fea
Show file tree

Hide file tree

Showing 3 changed files with 29 additions and 0 deletions.
diff --git a/README-zh_CN.md b/README-zh_CN.md
@@ -246,3 +246,7 @@ spec:
     ports:
     - containerPort: 80
 ```
+
+## 安全
+
+如果您发现了代码中的安全漏洞，请联系[[email protected]](mailto:[email protected])。详见 [SECURITY.md](SECURITY.md)
diff --git a/README.md b/README.md
@@ -316,3 +316,7 @@ slave device.
 ### DingTalk
 
 Join `DingTalk` group by `DingTalkGroup` id "35924643".
+
+## Security
+
+Please report vulnerabilities by email to [[email protected]](mailto:[email protected]). Also see our [SECURITY.md](SECURITY.md) file for details.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,21 @@
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported          |
+| ------- | ------------------ |
+| >= v1.6.0  | :white_check_mark: |
+| < 1.6.0    | :x:                |
+
+## Reporting a Vulnerability
+
+DO NOT CREATE AN ISSUE to report a security problem. Instead, please send an email to [[email protected]](mailto:[email protected])
+
+## Vulnerability Management Plans
+
+### Critical Updates And Security Notices
+
+We learn about critical software updates and security threats from these sources
+
+1. GitHub Security Alerts
+2. [Dependabot](https://dependabot.com/) Dependency Updates