Skip to content

Latest commit

 

History

History
32 lines (22 loc) · 1.89 KB

SECURITY.md

File metadata and controls

32 lines (22 loc) · 1.89 KB

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in this project, please report it through the GitHub Security Advisories page.

Important

Do not create a public issue for security vulnerabilities.

When reporting, please include:

  • A detailed description of the vulnerability.
  • Steps to reproduce the issue (if applicable).
  • Potential impact of the vulnerability.

I will review and respond to all reported vulnerabilities as quickly as possible.
Upon confirming the issue, I will take appropriate action to mitigate it and notify users accordingly.

Version Support

This project is open-source, and the latest commit represents the only supported version. Any vulnerabilities reported and resolved will be addressed in the latest commit.

Security Best Practices for Contributors

  1. Code Reviews: All pull requests should undergo thorough review to catch potential security issues.
  2. Sensitive Data: Avoid committing sensitive information such as passwords, API keys, or credentials.
  3. Dependencies: Ensure all external libraries or dependencies are up-to-date to minimize security risks.
  4. Secrets Management: Use appropriate secrets management solutions, such as environment variables or GitHub Secrets, rather than hard-coding sensitive data.
  5. Regular Scans: Utilize tools like GitHub's Dependabot to scan for vulnerabilities in dependencies.

Contact

For security-related concerns, please report vulnerabilities via the GitHub Security Advisories. For other questions, feel free to reach out via project discussions, email or any other contact method listed here.