Skip to content

Security: PSAppDeployToolkit/PSAppDeployToolkit

.github/SECURITY.md

Responsible Security Disclosure

Introduction

Thank you for your interest in PSAppDeployToolkit. We take the security of our software seriously and appreciate the efforts of security researchers in identifying and responsibly disclosing vulnerabilities. This document outlines our responsible disclosure policy and provides guidelines for reporting security vulnerabilities.

Reporting a Vulnerability

If you believe you have discovered a security vulnerability in PSAppDeployToolkit, we encourage you to report it to us as soon as possible. To report a vulnerability, please follow these steps:

  1. Send an email to security@psappdeploytoolkit.com with a detailed description of the vulnerability.
  2. Include any relevant information, such as the affected version(s) of the software, steps to reproduce the vulnerability, and any proof-of-concept code or screenshots.
  3. Provide your contact information (name, email address) so that we can acknowledge your report and keep you updated on the progress of the fix.

Responsible Disclosure Guidelines

To ensure the safety and privacy of our users, we kindly request that you adhere to the following guidelines when reporting a vulnerability:

  • Do not exploit the vulnerability beyond what is necessary to demonstrate the security issue.
  • Do not disclose the vulnerability to others until it has been resolved by the project maintainers.
  • Do not perform any actions that could negatively impact the availability or integrity of the software or its users' data.

Our Commitment

Upon receiving a vulnerability report, we will:

  • Acknowledge the receipt of your report within 3 business days.
  • Investigate and validate the reported vulnerability.
  • Work towards addressing the vulnerability in a timely manner.
  • Keep you informed of the progress and resolution of the vulnerability.

Recognition

We value the contributions of security researchers and may recognize their efforts, subject to their consent and our discretion. If you would like to be acknowledged for your responsible disclosure, please let us know in your initial report.

Legal Considerations

We will not take any legal action against security researchers who act in good faith and adhere to this responsible disclosure policy. We request that you do not violate any laws or breach any agreements in your research activities.

Conclusion

By following these guidelines, you are helping us ensure the security and privacy of our software and its users. We appreciate your cooperation and responsible approach to vulnerability disclosure.

Thank you, The PSAppDeployToolkit Team

There aren’t any published security advisories