Skip to content

Commit 32a0ac9

Browse files
Update SECURITY.md
1 parent af14508 commit 32a0ac9

1 file changed

Lines changed: 11 additions & 14 deletions

File tree

SECURITY.md

Lines changed: 11 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -2,25 +2,22 @@
22

33
## Supported Versions
44

5-
| Version | Supported |
6-
| ------- | ------------------ |
7-
| 0.x | :white_check_mark: |
5+
We release patches for security vulnerabilities in the latest version.
86

97
## Reporting a Vulnerability
108

11-
We take security seriously. If you discover a vulnerability, please report it responsibly.
9+
**Please do not report security vulnerabilities through public GitHub issues.**
1210

13-
**Do not** open a public GitHub issue for security vulnerabilities. Instead, please email security@codingdevtools.com with:
11+
Instead, please report them via GitHub's private vulnerability reporting feature:
1412

15-
1. Description of the vulnerability
16-
2. Steps to reproduce
17-
3. Potential impact
18-
4. Any suggested fixes
13+
1. Go to the repository's Security tab
14+
2. Click "Report a vulnerability"
15+
3. Fill in the details
1916

20-
We will acknowledge your report within 48 hours and aim to provide a fix within 7 days.
17+
We aim to respond within 48 hours and will keep you updated on the fix.
2118

22-
## Disclosure Policy
19+
## Security Best Practices
2320

24-
- We practice responsible disclosure
25-
- We ask that you give us reasonable time to fix the issue before public disclosure
26-
- We will credit researchers who report vulnerabilities (unless they prefer to remain anonymous)
21+
- Keep your dependencies up to date
22+
- Use `pip audit` to check for known vulnerabilities
23+
- Report any security concerns promptly

0 commit comments

Comments
 (0)