Skip to content

Security: Emzyjeppp/devflow-rules

Security

SECURITY.md

Security Policy

Supported Versions

We maintain and provide security updates for the latest version on the main branch.

Version Supported
1.x (main) Yes
< 1.0 No

Reporting a Vulnerability

If you discover a security vulnerability within this repository, CLI scripts, or associated skills, please report it responsibly:

  1. Do not create a public GitHub issue for undisclosed security vulnerabilities.
  2. Report the vulnerability privately via GitHub Security Advisories:
    • Navigate to the Security tab of the repository.
    • Click on Advisories and select Report a vulnerability.
  3. Alternatively, contact the repository maintainer directly via GitHub profile contact information.

Vulnerability Handling Process

  • Acknowledgment: We aim to acknowledge receipt of security reports within 48 hours.
  • Assessment: The maintainer will investigate the report and determine the impact and severity.
  • Resolution: Once a fix is prepared, a patch will be committed to main and a public advisory will be published if applicable.

There aren't any published security advisories