Skip to content

Add SECURITY.md #20

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
abhishek-anand merged 1 commit into from
Apr 14, 2026
Merged

Add SECURITY.md #20

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 12 additions & 0 deletions SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
# Security Policy

## Reporting a Vulnerability
Copy link
Copy Markdown

@gemini-code-assist gemini-code-assist Bot Apr 14, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

security-medium medium

It is a best practice to include a 'Supported Versions' section in your security policy. This helps researchers and users understand which versions of the project are currently receiving security updates. Additionally, consider linking this policy from the 'Security' section in your README.md.

Suggested change
## Reporting a Vulnerability
## Supported Versions
Please use the table below to check if the version of CodeRunner you are using is currently supported with security updates.
| Version | Supported |
| ------- | ------------------ |
| Latest | :white_check_mark: |
| < 1.0 | :x: |
## Reporting a Vulnerability


If you discover a security vulnerability in this project, please report it responsibly. **Do not open a public GitHub issue.**

Instead, please use one of the following methods:

- **Email:** [hello@instavm.io](mailto:hello@instavm.io)
- **GitHub Security Advisories:** Use [GitHub's private security reporting](https://github.com/instavm/coderunner/security/advisories/new) to disclose the vulnerability confidentially.

We take all security reports seriously and will respond as quickly as possible. Thank you for helping keep this project and its users safe.
Loading