Add security policy (#18762)

* Move security policy to own file

* New security policy

Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com>

* Use email from blog post

Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com>

---------

Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com>
This commit is contained in:
Pedro Kaj Kjellerup Nacht 2023-11-13 15:38:03 -03:00 committed by GitHub
parent c17e6b74b1
commit 91a50cfff9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

19
SECURITY.md Normal file

@ -0,0 +1,19 @@
# Security Policy
If you have discovered a security vulnerability in this project, please report it
privately. **Do not disclose it as a public issue.** This gives us time to work with you
to fix the issue before public exposure, reducing the chance that the exploit will be
used before a patch is released.
You may submit the report in the following ways:
- send an email to fchollet@google.com; and/or
- send a [private vulnerability report](https://github.com/keras-team/keras/security/advisories/new)
Please provide the following information in your report:
- A description of the vulnerability and its impact
- How to reproduce the issue
This project is maintained by volunteers on a reasonable-effort basis. As such,
please give us 90 days to work on a fix before public exposure.