From 673e64924b0c14f31a7316371500a674f24b3375 Mon Sep 17 00:00:00 2001 From: Sylvia van Os Date: Sun, 16 Jul 2023 01:25:53 +0200 Subject: [PATCH] Add security policy --- SECURITY.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 000000000..c0db4f23a --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,13 @@ +# Security Policy + +Catima is designed to use as little permissions as possible to limit both the attack surface as well as the damage that can be done when abusing a security flaw. + +## Supported Versions + +Only the most recent stable release is supported. + +## Reporting a Vulnerability + +Security vulnerabilities can be reported through [GitHub Security Advisories](https://github.com/CatimaLoyalty/Android/security/advisories) or [the contact info written on my personal website](https://sylviavanos.nl/#contact). Currently, Matrix is the only end-to-end encrypted option. + +Please note that only security vulnerabilities in Catima should be reported as stated above. For other issues, including antivirus false positives and malicious applications trying to trick people into granting them Catima's "Read Cards" permission, please use [regular issues](https://github.com/CatimaLoyalty/Android/issues).