Skip to content

SECURITY.md

Latest commit

 

History

History
54 lines (34 loc) · 1.8 KB

SECURITY.md

File metadata and controls

54 lines (34 loc) · 1.8 KB
Raw

Security Policy

Reporting Security Vulnerabilities

We take the security of our software seriously. If you believe you've found a security vulnerability in the Replicate Ruby client, please report it to us as described below.

Reporting Process

Please do not report security vulnerabilities through public GitHub issues.

Instead, please report security vulnerabilities by emailing:

What to Include

When reporting a security vulnerability, please include:

  1. Description: A clear description of the vulnerability
  2. Steps to Reproduce: Detailed steps to reproduce the issue
  3. Impact: What an attacker could achieve by exploiting this vulnerability
  4. Affected Versions: Which versions of the gem are affected
  5. Mitigation: Any suggested fixes or workarounds

Response Timeline

We will acknowledge your report within 48 hours and provide a more detailed response within 7 days indicating our next steps.

We will keep you informed about our progress throughout the process of fixing the vulnerability.

Responsible Disclosure

We kindly ask that you:

  • Give us reasonable time to fix the issue before making it public
  • Avoid accessing or modifying user data
  • Avoid disrupting our services
  • Don't perform DoS attacks or spam our systems

Security Updates

Once a security vulnerability has been fixed, we will:

  1. Assign a CVE identifier if appropriate
  2. Release a security advisory on GitHub
  3. Update the CHANGELOG.md with details
  4. Release a patch version of the gem

Questions

If you have questions about our security policy, please contact us at security@durableprogramming.com.

Thank you for helping keep our users safe! </xai:function_call">