mirror of
https://github.com/EasyTier/EasyTier.git
synced 2026-09-13 00:00:43 +00:00
KKRainbow
86d942ec8c
* docs(security): add private reporting policy Document supported versions and route vulnerability reports through GitHub's private advisory workflow. Add English and Chinese responsible-use notices to the READMEs. Closes #2544 * ci: skip unrelated pull request builds Use pull-request-aware path filtering for required Core, GUI, Mobile, and Test workflows so they still publish required check contexts without launching expensive jobs for documentation changes. Limit the optional OHOS pull request workflow to relevant paths.
1.2 KiB
1.2 KiB
Security Policy
简体中文 | English
Supported Versions
Security updates are provided for the latest EasyTier release. Before reporting a vulnerability, please verify it against the latest release or the current main branch when practical.
| Version | Supported |
|---|---|
| Latest release | Yes |
| Older releases | No |
Reporting a Vulnerability
Please report suspected vulnerabilities through GitHub's private vulnerability reporting form.
Do not disclose the vulnerability in a public issue, discussion, or pull request. A useful report should include:
- the affected EasyTier version or commit;
- the affected platform and relevant configuration, with secrets removed;
- a description of the vulnerability and its potential impact;
- reproducible steps or a minimal proof of concept; and
- any known mitigations or workarounds.
The maintainers will assess the report and coordinate remediation and disclosure through the private advisory. Please allow reasonable time for a fix before publishing details.
When investigating, avoid accessing or modifying other users' data, disrupting services, or violating applicable laws.