Skip to content

Security: CampAsAChamp/portfolio

Security

SECURITY.md

Security Policy

Supported Versions

This portfolio website is continuously maintained. The latest version deployed at https://nickhs.dev is the only supported version.

Version Supported
Latest (main branch)
Older versions

Reporting a Vulnerability

If you discover a security vulnerability in this portfolio website, please report it responsibly:

How to Report

  1. Email: Please send details to the repository owner (contact information available in the repository or on the website)
  2. GitHub Security Advisory: You can also use GitHub's private security advisory feature:
    • Go to the repository's "Security" tab
    • Click "Report a vulnerability"
    • Fill out the form with details

What to Include

When reporting a vulnerability, please include:

  • A description of the vulnerability
  • Steps to reproduce the issue
  • Potential impact of the vulnerability
  • Any suggested fixes (if applicable)

Response Timeline

  • Acknowledgment: Within 48 hours of receiving a report
  • Assessment: Within 5 business days, you'll receive an update on the vulnerability assessment
  • Fix: Critical vulnerabilities will be addressed as soon as possible, typically within 7 days

Disclosure Policy

  • Please do not publicly disclose the vulnerability until a fix has been released
  • Once fixed, credit will be given to the reporter (if desired) in the commit message and/or release notes

Security Best Practices

This project follows these security practices:

  • Regular dependency updates via Dependabot
  • Automated security scanning via GitHub's Dependabot alerts
  • Strict TypeScript configuration to catch potential issues at compile time
  • Comprehensive linting and code quality checks
  • Pre-commit and pre-push hooks to prevent insecure code from being committed

Contact

For any security-related questions or concerns, please contact the repository owner through:

  • GitHub Issues (for non-sensitive matters)
  • Email (available in repository or website footer)

Thank you for helping keep this project secure!

There aren't any published security advisories