Update SECURITY.md

This commit is contained in:
Stalin
2026-05-25 01:36:43 +05:30
committed by GitHub
parent 342857a44b
commit 52ae6fc110
+18 -19
View File
@@ -1,30 +1,29 @@
# Security Policy ## Security Policy
## Supported Versions ### Reporting Vulnerabilities
We currently support security updates for the latest stable release on PyPI: If you discover any security vulnerabilities, please report them responsibly.
- `exectrace-workflow` latest version Send detailed vulnerability reports to:
## Reporting a Vulnerability Email: w4nn4d133@gmail.com
Please do **not** open a public issue for security bugs. OpenPGP Fingerprint:
`DEBE5591C54E947279C14A6BF53D272DA9ADAF98`
Use one of these methods: Public Key:
https://keys.openpgp.org/vks/v1/by-fingerprint/DEBE5591C54E947279C14A6BF53D272DA9ADAF98
1. GitHub Security Advisories (preferred): Alternatively, you may submit your report through our official advisory channel (if available).
- Go to Security tab in the repository
- Click Advisories
- Start a private vulnerability report
2. If advisories are unavailable, open a private report via repository maintainers.
## Disclosure Timeline ### Guidelines for Reporting
1. We acknowledge reports within 72 hours. Please include:
2. We validate and reproduce the issue.
3. We prepare a fix and release patch.
4. We publish an advisory with credit (if requested).
## Hall of Fame - A clear description of the vulnerability
- Steps to reproduce the issue
- Proof-of-Concept (PoC), if possible
- The potential security impact
- Affected versions/components
Responsible reporters are credited on the project website under Security Hall of Fame after a fix is shipped. We appreciate responsible disclosure and will work to validate and address legitimate security issues promptly.