From 440a69f1952b897f764dbc98c37b09f6bef434e3 Mon Sep 17 00:00:00 2001 From: Marko Bevc Date: Tue, 28 Jul 2026 15:37:49 +0100 Subject: [PATCH 1/2] chore: add a security policy and reporting Updated the security policy to reflect supported versions and reporting procedures. --- SECURITY.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 000000000..f27066e82 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,16 @@ +# Security Policy + +## Supported Versions + +Only v2 2of CLI is currently supported! Please try and use the latest release before reporting an issue. + +## Reporting a Vulnerability + +Please send all reports to security@kosli.com and include: +* Clear description of the vulnerability +* Steps to reproduce +* Potential impact assessment +* Any supporting evidence (screenshots, logs, PoC) + +## Our Commitment +Integrity is a core value at Kosli. We have a strong track record of working fairly and openly with security researchers, and we're committed to transparent communication throughout the disclosure process. We will acknowledge receipt, assess the finding, and respond with our determination. If we classify the vulnerability differently than reported, we'll explain our reasoning. From f10503035a0f2d2d1e888fbf3799aaee307e33b8 Mon Sep 17 00:00:00 2001 From: Marko Bevc Date: Tue, 28 Jul 2026 15:38:39 +0100 Subject: [PATCH 2/2] Apply suggestions from code review Co-authored-by: Marko Bevc --- SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index f27066e82..d6bf24fab 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,7 +2,7 @@ ## Supported Versions -Only v2 2of CLI is currently supported! Please try and use the latest release before reporting an issue. +Only `v2` of the Kosli CLI is currently supported! Please try and use the latest release before reporting an issue. ## Reporting a Vulnerability