mirror/DHT11
1
0
Fork 0
mirror of https://github.com/dhrubasaha08/DHT11.git synced 2023-10-23 22:17:45 +03:00
Code Issues Projects Releases Wiki Activity

Create SECURITY.md

Browse Source 
Signed-off-by: Dhruba Saha <dhrubasaha08@gmail.com>
This commit is contained in:
Dhruba Saha 2023-09-21 17:21:29 +05:30 committed by GitHub
parent e6cc6853c3
commit 5bba4adae1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 26 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
SECURITY.md Normal file
View File

@ -0,0 +1,26 @@
# Security Policy
## Supported Versions
This section lists the versions of the DHT11 library that are currently receiving security updates.
| Version | Supported |
| ------- | ------------------ |
| 2.0.x | :white_check_mark: |
| < 2.0 | :x: |
## Reporting a Vulnerability
The DHT11 Arduino library primarily facilitates interaction with the DHT11 temperature and humidity sensor. While the risk associated with this is minimal, maintaining a secure and reliable codebase remains a priority.
If you believe you've found a security vulnerability in the DHT11 library, please follow the steps below:
1. **Do Not Open a Public Issue:** To ensure the vulnerability doesn't become public knowledge and put users at risk, refrain from opening an issue on the public GitHub repository.
2. **Contact the Maintainer:** Send a detailed description of the vulnerability directly to [dhrubasaha@outlook.com](mailto:dhrubasaha@outlook.com). Please provide as much information as possible to help understand the scope and severity of the potential issue.
3. **Response Time:** I aim to acknowledge and respond to your report within 7 days. In the response, you can expect an evaluation of the issue and an estimated timeline for a fix if deemed necessary.
4. **Disclosure:** Once the vulnerability has been addressed, I'll work with you to publicly disclose the issue in a responsible manner, ensuring the community is informed and can take appropriate actions.
Your efforts to responsibly disclose your findings are sincerely appreciated and will be acknowledged.