Skip to content

SECURITY.md

Latest commit

 

History

History
43 lines (27 loc) · 1.3 KB

SECURITY.md

File metadata and controls

43 lines (27 loc) · 1.3 KB

Security Policy

Supported Versions

Only the latest release on the main branch receives security updates at this time.

Version Supported
main (latest) Yes
older tags No

Reporting a Vulnerability

Please do not open a public GitHub issue for security reports.

Instead, use GitHub's private vulnerability reporting:

  1. Go to the Security tab of this repository
  2. Click Report a vulnerability
  3. Fill in the form with details and reproduction steps

Alternatively, email skyoo2003@gmail.com with the subject prefix [devcloud-security].

What to include

  • A clear description of the issue
  • Steps to reproduce
  • Affected version or commit SHA
  • Potential impact

Response timeline

  • Acknowledgement: within 3 business days
  • Initial assessment: within 7 business days
  • Fix or mitigation plan: communicated once triaged

Scope

This project is a local development tool (AWS emulator). It is not intended for production use and should not be exposed to untrusted networks. Reports that assume a production deployment are lower priority than those affecting local development workflows.

Thanks

Responsible reporters will be credited in the release notes unless they request otherwise.