Mark Paluch
16 lines
691 B
Markdown
16 lines
691 B
Markdown
# Security Policy
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
Please [open a draft security advisory](https://github.com/spring-projects/spring-data-elasticsearch/security/advisories/new) if you need to disclose and discuss a security issue in private with the Spring Data team.
|
|
Note that we only accept reports against [supported versions](https://spring.io/projects/spring-data#support).
|
|
|
|
For more details, check out our [security policy](https://spring.io/security-policy).
|
|
|
|
## JAR signing
|
|
|
|
Spring Data JARs released on Maven Central are signed.
|
|
You'll find more information about the key here: https://spring.io/GPG-KEY-spring.txt
|
|
|
|
Versions released prior to 2023 may be signed with a different key.
|