SECURITY.md (#538)

* doc : SECURITY.md added

* fix : SECURITY.md added to version_check.py

* doc : CHANGELOG.md updated

* doc : minor edit in SECURITY.md titles

CHANGELOG.md

@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 ### Added
 - `feature_request.yml` template
 - `config.yml` for issue template
+- `SECURITY.md`
 ### Changed
 - Bug report template modified
 - Diagrams updated

Otherfiles/version_check.py

@@ -25,10 +25,12 @@
 PARAMS_ITEMS = ['PYCM_VERSION = "{0}"']
 META_ITEMS = ['% set version = "{0}" %']
 ISSUE_TEMPLATE_ITEMS = ["- PyCM {0}"]
+SECURITY_ITEMS = ["| {0}           | :white_check_mark: |", "| < {0}         | :x:                |"]
 FILES = {
     os.path.join("Otherfiles", "meta.yaml"): META_ITEMS,
     "setup.py": SETUP_ITEMS, "README.md": README_ITEMS,
     "CHANGELOG.md": CHANGELOG_ITEMS,
+    "SECURITY.md": SECURITY_ITEMS,
     os.path.join("Document", "Document.ipynb"): DOCUMENT_ITEMS,
     os.path.join("Document", "Example1_files", "cm1.html"): HTML_ITEMS,
     os.path.join("Document", "Example1_files", "cm2.html"): HTML_ITEMS,

SECURITY.md

@@ -0,0 +1,14 @@
+# Security policy
+
+## Supported versions
+
+| Version       | Supported          |
+| ------------- | ------------------ |
+| 4.0           | :white_check_mark: |
+| < 4.0         | :x:                |
+
+## Reporting a vulnerability
+
+Please report security vulnerabilities by email to [[email protected]](mailto:[email protected] "[email protected]").
+
+If the security vulnerability is accepted, a dedicated bugfix release will be issued as soon as possible (depending on the complexity of the fix).