Add files for scorecard

HewlettPackard · Jun 27, 2022 · 8a01596 · 8a01596
1 parent 8e64573
commit 8a01596
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 1 deletion.
diff --git a/LICENSE b/LICENSE
@@ -0,0 +1 @@
+Mithril License
diff --git a/POC/README.md b/POC/README.md
@@ -1,6 +1,6 @@
 # Mithril POC
 
-[![Build status badge](https://jenkins.docker.hpecorp.net/buildStatus/icon?job=sec-eng%2Fistio-spire%2Fmaster)](https://jenkins.docker.hpecorp.net/job/sec-eng/job/istio-spire/job/master/)
+[![Scorecards supply-chain security](https://github.com/n-th/mithril/actions/workflows/scorecards.yml/badge.svg)](https://github.com/n-th/mithril/actions/workflows/scorecards.yml)
 
 This POC is a WIP. 
 

diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,14 @@
+# Security Policy
+
+## Supported Versions
+
+Versions of the project that are currently being supported with security updates:
+
+| Version | Supported          |
+| ------- | ------------------ |
+| <=1.0.x    | :white_check_mark: |
+
+
+## Reporting a Vulnerability
+
+If you've found a vulnerability or a potential vulnerability in Mithril please let us know at [email protected]. We'll send a confirmation email to acknowledge your report, and we'll send an additional email when we've identified the issue positively or negatively.