setup-php/.github/SECURITY.md

# Security Policy

## Supported Versions

The following versions of this project are supported for security updates.

| Version | Supported          |
| ------- | ------------------ |
| 1.9.x   | :white_check_mark: |
| 2.4.x   | :white_check_mark: |

## Supported PHP Versions

This security policy only applies to the latest patches of the following PHP versions.

| Version | Supported          |
| ------- | ------------------ |
| 7.2     | :white_check_mark: |
| 7.3     | :white_check_mark: |
| 7.4     | :white_check_mark: |
| 8.0     | :white_check_mark: |

## Reporting a Vulnerability

If you have found any issues that might have security implications in the versions supported, please send a report privately to [contact@shivammathur.com](mailto:contact@shivammathur.com).
Do not report security reports publicly.

## Tidelift

If you use this GitHub Action through a Tidelift subscription, please refer to [https://tidelift.com/security](https://tidelift.com/security).