Skip to content

Create SECURITY.md #5

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
rakibulhaq merged 1 commit into from
Jun 29, 2025
Merged

Create SECURITY.md #5

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 18 additions & 0 deletions SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
# Security Policy

## Supported Versions

| Version | Supported |
| ------- | ----------------- |
| 0.1.x | :white_check_mark: |

## Reporting a Vulnerability

If you discover a security vulnerability, please do **not** open an issue or discuss it publicly.

Instead, report it privately by emailing **[email protected]**.
Copy link

Copilot AI Jun 29, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider using a dedicated security contact (e.g., [email protected]) instead of a personal address to centralize reports and avoid exposing personal emails.

Suggested change
Instead, report it privately by emailing **haq.rakibul@gmail.com**.
Instead, report it privately by emailing **security@yourdomain.com**.

Copilot uses AI. Check for mistakes.
Include as much detail as possible to help us quickly resolve the issue.

Comment on lines +14 to +15
Copy link

Copilot AI Jun 29, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Add a PGP/GPG key fingerprint or instructions for encrypting emails to ensure vulnerability reports remain confidential in transit.

Suggested change
Include as much detail as possible to help us quickly resolve the issue.
To ensure confidentiality, please encrypt your email using the following PGP key:
**PGP Key Fingerprint:** `3F2C 4A1B 5D6E 7F8G 9H0I J1K2 L3M4 N5O6 P7Q8 R9S0`
You can download the full PGP public key from [this link](https://example.com/pgp-key.asc).
To encrypt your email, use a PGP-compatible email client or tool. Include as much detail as possible to help us quickly resolve the issue.

Copilot uses AI. Check for mistakes.
We will respond as soon as possible and coordinate a fix and disclosure.

Thank you for helping keep this project and its users safe!