Skip to content

Security: ChicoState/cheat-sheet

Security

SECURITY.md

Security Policy

Supported Use

This project is actively maintained on the default branch.

Reporting a Vulnerability

Do not open public issues for security-sensitive problems.

Instead:

  1. Use the repository Security tab to submit a private vulnerability report through GitHub Security Advisories.
  2. Include a clear description, impact, affected area, and reproduction steps.
  3. Share proposed mitigations if you have them.

The maintainers will review the report, confirm severity, and coordinate a fix when appropriate.

Sensitive Areas

Please pay extra attention to:

  • Authentication and JWT handling
  • PDF compilation and subprocess execution
  • File uploads or generated content
  • Dependency security in both frontend and backend

There aren't any published security advisories