From eca4e38e86ae51ade1710bfe84379adf91e40acc Mon Sep 17 00:00:00 2001 From: Brad Keryan Date: Thu, 4 Jan 2024 14:10:26 -0600 Subject: [PATCH] repo: Add security policy (#467) Copied from https://github.com/ni/github-repo-template/blob/main/SECURITY.md --- SECURITY.md | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..ce102abf --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,19 @@ + + +# Security + +NI views the security of our software products as an important part of our commitment to our users. This includes source code repositories managed through the [NI](https://github.com/ni) GitHub organization. + +## Reporting Security Issues + +We encourage you to report security vulnerabilities to us privately so we can follow the principle of [Coordinated Vulnerability Disclosure (CVD)](https://vuls.cert.org/confluence/display/CVD). This allows us time to thoroughly investigate security issues and publicly disclose them when appropriate. + +**Please do not report security vulnerabilities through public GitHub issues.** + +Instead, please report them by sending an email to [security@ni.com](mailto:security@ni.com) with sufficient details about the type of issue, the impact of the issue, and how to reproduce the issue. You may use the [NI PGP key](https://www.ni.com/en/support/security/pgp.html) to encrypt any sensitive communications you send to us. When you notify us of a potential security issue, our remediation process includes acknowledging receipt and coordinating any necessary response activities with you. + +## Learn More + +To learn more about NI Security, please see [https://ni.com/security](https://ni.com/security) + + \ No newline at end of file