spring-framework/SECURITY.md

# Security Policy

## JAR signing

Spring Framework JARs released on Maven Central are signed.
You'll find more information about the key here: https://spring.io/GPG-KEY-spring.txt

## Supported Versions

Please see the
[Spring Framework Versions](https://github.com/spring-projects/spring-framework/wiki/Spring-Framework-Versions)
wiki page.

## Reporting a Vulnerability

Please see https://spring.io/security-policy.
Create SECURITY.md 2019-05-23 23:36:52 +08:00			`# Security Policy`

Mention JAR signing key in SECURITY.md This commit adds a link to the now published information on spring.io about the GPG key used to sign the Spring artifacts published on Maven Central. Closes gh-23434 2023-03-18 05:30:49 +08:00			`## JAR signing`

			`Spring Framework JARs released on Maven Central are signed.`
			`You'll find more information about the key here: https://spring.io/GPG-KEY-spring.txt`

Create SECURITY.md 2019-05-23 23:36:52 +08:00			`## Supported Versions`

			`Please see the`
			`[Spring Framework Versions](https://github.com/spring-projects/spring-framework/wiki/Spring-Framework-Versions)`
			`wiki page.`

			`## Reporting a Vulnerability`

Update "Reporting a Vulnerability" link 2021-10-20 20:48:51 +08:00			`Please see https://spring.io/security-policy.`