# Security Policy

[![CodeQL](https://github.com/django-commons/django-polymorphic/actions/workflows/github-code-scanning/codeql/badge.svg?branch=main)](https://github.com/django-commons/django-polymorphic/actions/workflows/github-code-scanning/codeql?query=branch:main)
[![Zizmor](https://github.com/django-commons/django-polymorphic/actions/workflows/zizmor.yml/badge.svg?branch=main)](https://docs.zizmor.sh)
[![Bandit](https://github.com/django-commons/django-polymorphic/actions/workflows/bandit.yml/badge.svg?branch=main)](https://bandit.readthedocs.io)
[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/django-commons/django-polymorphic/badge)](https://securityscorecards.dev/viewer/?uri=github.com/django-commons/django-polymorphic)

## Supported Versions

Only the latest version [![PyPI version](https://badge.fury.io/py/django-polymorphic.svg)](https://pypi.python.org/pypi/django-polymorphic) is supported.

## Reporting a Vulnerability

If you think you have found a vulnerability, and even if you are not sure, please [report it to us in private](https://github.com/django-commons/django-polymorphic/security/advisories/new). We will review it and get back to you. Please refrain from public discussions of the issue.
