Skip to content

Latest commit

 

History

History
26 lines (17 loc) · 1.18 KB

SECURITY.md

File metadata and controls

26 lines (17 loc) · 1.18 KB

Security Policy

The following security policies are applicable to the ImpLib SDK source code, documentation and releases. Please, follow these rules if you wish to report a vulnerability, request an enhancement or otherwise contribute to the project.

Good practices to follow

⚠️ Never store credentials information into source code or config file in a GitHub repository

  • Block sensitive data being pushed to GitHub by git-secrets or its likes as a git pre-commit hook
  • Audit for slipped secrets with dedicated tools
  • Use environment variables for secrets in CI/CD (e.g. GitHub Secrets) and secret managers in production
  • Don't include links to irrelevant external websites or files

Supported Versions

Version Supported
2.0.X ✅
1.X ❌

Reporting a Vulnerability

Please, use the Security Advisories to report vulnerabilities or any other security concerns.

Security Update policy

Vulnerabilities will be communicated via GitHub Advisories and a description of the issue will be included in the release notes.