diff --git a/.github/SECURITY.md b/.github/SECURITY.md new file mode 100644 index 00000000..8ea5bd33 --- /dev/null +++ b/.github/SECURITY.md @@ -0,0 +1,24 @@ +# Security + +## Reporting a Vulnerability + +If you would like to report a security vulnerability, +please email **[security@revolt.chat](mailto:security@revolt.chat)**, +this will open a new ticket in ticket system, you should receive a response +within the next couple of days, potentially within a few minutes if someone +is currently active. + +To help us best triage the issue, please provide: + +- The type of issue at hand +- The name of the relevant project affected +- Reproduction steps +- Reference to any relevant source file(s) that you may suspect are causing the issue +- Any extra information about your configuration. +- Description of potential ways this can be exploited, if you can list any + +For revoltchat/revite in particular: + +- Please include the commit hash of the client, it is visible in settings under the log out button. + +Thank you for helping Revolt.