mirror of
https://github.com/rlespinasse/github-slug-action.git
synced 2026-05-17 18:35:07 +00:00
1.3 KiB
1.3 KiB
Security Policy
Supported Versions and Branches
We only support 2 major versions for security patches
| Version | Branch | Supported | Specific Tags |
|---|---|---|---|
| 4.x | v4.x | ✅ | v4 |
| 3.x | v3.x | ✅ | |
| < 2.x | ❌ | v2.x, v1.1.x |
A GitHub repository can used one of the available branches as action inside its workflows.
End of Life of a branch
When a branch is not supported anymore, the following process occurs
- Since
v4.xbranch, the branch will be deleted 2 major versions after- So
v4.xbranch will be deleted whenv7.xbranch will have its first release - prefer the
v4tag tov4.xbranch as reference in our workflow,
- So
- Before
v4.xbranch, the branch will be converted into a tag when the support is dropped- So
v3.xbranch will be converted as tag whenv5.xbranch will have its first release
- So
Reporting a Vulnerability
You can report a Vulnerability by creating a (https://github.com/rlespinasse/github-slug-action/security/advisories)[draft security advisory] in this project.
If the vulnerability is confirm, a fix will be produce and the advisory will be publish.