We take the security of our software seriously. If you discover any vulnerabilities or have security concerns regarding this project, please follow the guidelines below to report them responsibly.
If you find a vulnerability in this repository, please send an email to ewb@smhome.it with a detailed description of the issue.
We will acknowledge your report promptly and work with you to resolve the issue as quickly as possible.
Please include:
- A clear description of the vulnerability
- Steps to reproduce (if applicable)
- The potential impact
- Any proposed fixes or mitigations
- Acknowledgment: Upon receiving a report, we will confirm receipt and triage the issue.
- Verification: We will verify the vulnerability and assess its impact.
- Resolution: We will work on a fix and coordinate a responsible public disclosure, if necessary.
- Public Communication: Once resolved, we may issue a public advisory detailing the vulnerability and how it was fixed.
To help maintain a secure environment for this project, we encourage contributors to follow standard security best practices, including:
- Avoid committing sensitive credentials or secrets into version control
- Enable secret scanning and push protection in the repository settings
- Regularly update dependencies to avoid known vulnerabilities
For more information about securing repositories on GitHub, refer to the GitHub Security Documentation