prehistoric-systems/coolify
1
0
Fork 0
mirror of https://github.com/coollabsio/coolify.git synced 2026-03-11 08:55:47 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

docs: add improved SECURITY.md file

Browse source 
- new Support Policy table
- improved reporting guide for vulnerabilities
This commit is contained in:
peaklabs-dev 2025-03-29 14:49:38 +01:00
parent 7a71e510a9
commit f3df3bbb93
No known key found for this signature in database
1 changed files with 16 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

30
SECURITY.md
View file

@ -1,25 +1,27 @@
# Security Policy
# Security
## Supported Versions
This page outlines our support policy and how to report vulnerabilities.
Currently supported, maintained and updated versions:
## Support Policy
| Version | Supported | Support Status |
| ------- | ------------------ | -------------- |
| 4.x | :white_check_mark: | Active Development & Security Updates |
| < 4.0 | :x: | End of Life (no security updates) |
Below you can find the support status for different versions of Coolify.
## Security Updates
| Version | Supported | Support Status | Initial Release | End of Life Date |
| ------- | ------------------ | ---------------------------------- | --------------- | --------------------- |
| **5.x** | :white_check_mark: | Active Development | TBD | N/A - Current Version |
| **4.x** | :warning: | Security & Critical Bug Fixes Only | July 14th, 2023 | TBD |
| **3.x** | :x: | No Longer Supported | July 6th, 2022 | September 5th, 2023 |
We take security seriously. Security updates are released as soon as possible after a vulnerability is discovered and verified.
:warning: : Limited Support
## Reporting a Vulnerability
If you discover a security vulnerability, please follow these steps:
If you find a security vulnerability in a currently supported version, please follow these steps:
1. **DO NOT** disclose the vulnerability publicly.
2. Send a detailed report to: `security@coollabs.io`.
2. Send a detailed report to: `security@coollabs.io` or report it via [GitHub Security Advisories](https://github.com/coollabsio/coolify/security/advisories/new).
3. Include in your report:
- A description of the vulnerability
- Steps to reproduce the issue
- Potential impact
- **Explanation:** Detailed explanation of the vulnerability.
- **Affected Versions:** Which Coolify versions are affected.
- **Reproduction:** Clear steps to reproduce the vulnerability.
- **Impact:** Assessment of the potential impact of the vulnerability.