# Security Policy

## Security Announcements

Security announcements will be recorded in the [CHANGELOG](CHANGELOG.md).

## Reporting a Vulnerability

To report a security vulnerability, email
agithub-security-vulnerability-report-2021@mozilla.com

The members of this security vulnerability report mailing list can be configured
by Mozilla [here](https://groups.google.com/a/mozilla.com/g/agithub-security-vulnerability-report-2021).

## Supported Versions

agithub is an open source project and all support is community driven. As such
there are no specific versions which are supported. The newest released
version which should contain all security fixes can be found on the GitHub
[releases page](https://github.com/mozilla/agithub/releases)
Add security vulnerability reporting policy
Add security vulnerability reporting policy
