|
1 | 1 | # Security Policy |
2 | 2 |
|
3 | | -## Supported Versions |
| 3 | +## Security considerations |
4 | 4 |
|
5 | | -Use this section to tell people about which versions of your project are |
6 | | -currently being supported with security updates. |
| 5 | +When writing AssembleScript scripts, it is important to be aware of the |
| 6 | +following security considerations: |
7 | 7 |
|
8 | | -| Version | Supported | |
9 | | -| ------- | ------------------ | |
10 | | -| 5.1.x | :white_check_mark: | |
11 | | -| 5.0.x | :x: | |
12 | | -| 4.0.x | :white_check_mark: | |
13 | | -| < 4.0 | :x: | |
| 8 | +- Do not use AssembleScript to execute code that you do not trust. |
| 9 | +- Use caution when importing modules from third-party sources. |
| 10 | +- Be aware of the potential for AssembleScript scripts to be used for malicious |
| 11 | + purposes. |
14 | 12 |
|
15 | | -## Reporting a Vulnerability |
| 13 | +## Reporting security vulnerabilities |
16 | 14 |
|
17 | | -Use this section to tell people how to report a vulnerability. |
| 15 | +If you believe that you have found a security vulnerability in AssembleScript, |
| 16 | +please report it to the project maintainers by opening an issue on the GitHub |
| 17 | +repository. |
18 | 18 |
|
19 | | -Tell them where to go, how often they can expect to get an update on a reported |
20 | | -vulnerability, what to expect if the vulnerability is accepted or declined, etc. |
| 19 | +## Security updates |
| 20 | + |
| 21 | +The AssembleScript project will periodically release security updates to address |
| 22 | +known vulnerabilities. It is important to keep your AssembleScript installation |
| 23 | +up to date to ensure that you are protected against the latest threats. |
| 24 | + |
| 25 | +## Reporting security vulnerabilities |
| 26 | + |
| 27 | +If you believe that you have found a security vulnerability in AssembleScript, |
| 28 | +please report it to the project's team via discussions. |
| 29 | + |
| 30 | +The security team will investigate your report and take appropriate action to |
| 31 | +address the vulnerability. |
| 32 | + |
| 33 | +Thank you for helping to keep AssembleScript secure. |
0 commit comments