Merge pull request #251 from nyu-mlab/fix-deploy

Add Security Policy and hotfix for NSIS deployment

Author: crazyideas21

.github/workflows/create_release.yml

@@ -49,15 +49,13 @@ jobs:
 
     - name: Install NSIS
       if: runner.os == 'Windows'
-      shell: pwsh
-      run: |
-        choco install nsis --no-progress
+      uses: negrutiu/nsis-install@v2
 
     - name: Create Windows IoT Inspector launcher
       if: runner.os == 'Windows'
       shell: pwsh
       run: |
-        .\nsis.ps1
+        makensis iot-inspector.nsi
 
     - name: Store the IoT Inspector executable
       if: runner.os == 'Windows'

SECURITY.md

@@ -0,0 +1,24 @@
+# Security Policy
+
+## Supported Versions
+
+Use this section to tell people about which versions of your project are
+currently being supported with security updates.
+
+| Version                   | Supported          |
+|---------------------------| ------------------ |
+| 3 (released October 2025) | :white_check_mark: |
+| All prior versions        | :x:                |
+
+## Reporting a Vulnerability
+
+To report a vulnerability, please create a GitHub Issue under `Issue/bug report` and document the security vulnerability in detail. Ideally, include steps for remediation.
+
+You are encouraged to submit a GitHub pull request linked to the issue with a proposed fix.
+
+| Severity   | SLA for Fix         |
+|------------|--------------------|
+| Critical   | 7 days             |
+| High       | 30 days            |
+| Medium     | 90 days            |
+| Low        | 180 days           |