Skip to content

Security: iris-is-me/ExpandoBot

SECURITY.md

Security Policy

Supported Versions

The following versions of this project are currently supported with security updates:

Version Supported
0.0.x ✅

Reporting a Vulnerability

If you discover a security vulnerability, please report it responsibly.

Do not open a public GitHub issue for security vulnerabilities.

Instead, report the issue by:

  • Opening a private security advisory on GitHub

Please include:

  • A description of the vulnerability
  • Steps to reproduce the issue
  • The potential impact
  • Any relevant logs, screenshots, or proof-of-concept details

Response Process

After receiving a report, the maintainers will:

  1. Confirm receipt of the report.
  2. Investigate and validate the issue.
  3. Work on a fix if the vulnerability is confirmed.
  4. Release a security update when appropriate.
  5. Credit the reporter (if they wish to be credited).

Disclosure Policy

Please allow reasonable time for a fix before publicly disclosing security issues.

We appreciate responsible disclosure and the effort of security researchers who help improve this project.

Security Updates

Security updates will be announced through:

  • GitHub Releases
  • The project's changelog
  • Security advisories (when applicable)

There aren't any published security advisories