Merge pull request #2 from EliLillyCo/security-doc

Create SECURITY.md

CHANGELOG.md

@@ -4,10 +4,16 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.1]
+### Created
+- `SECURITY.md` file creation.
+- GitHub Actions Workflow Creation. 
+- Updated dependenices resolving security problems. 
 
-## 1.0.0
+## [1.0.0]
 ### Created
 - Initial release of JenkinsDSL core.
 
+[1.0.1]: https://github.com/EliLillyCo/CIRR_JenkinsPipelineLibraries/releases/v1.0.1...v1.0.0
 [1.0.0]: https://github.com/EliLillyCo/CIRR_JenkinsPipelineLibraries/releases/v1.0.0
 

SECURITY.md

@@ -0,0 +1,18 @@
+# Security Policy
+
+## Supported Versions
+
+The versions of this project which are currently being supported with security updates are:
+
+| Version | Supported |
+| ------- | ------------------ |
+| 1.x | :white_check_mark: |
+
+## Reporting a Vulnerability
+
+If you find a vulnerability assosiated with this source code please contact either:
+
+- [Jarrett Alexander](mailto:alexander_jarrett@lilly.com).
+- [Nick Liffen](mailto:liffen_nicholas@lilly.com).
+
+For the moment in time, **please do not** open a GitHub issue on the repository to report a vulnerability.