e7bde2b3f4
All checks were successful
publish-latest / docker (push) Successful in 9s
ci / test (3.10) (push) Successful in 19s
ci / test (3.12) (push) Successful in 19s
ci / test (3.13) (push) Successful in 19s
ci / container (push) Successful in 7s
publish-image / docker (push) Successful in 8s
20 lines
814 B
Markdown
20 lines
814 B
Markdown
# Security Policy
|
|
|
|
## Supported versions
|
|
|
|
Until tagged releases are published, only the current default branch receives
|
|
security fixes. Supported release versions will be listed here once releases
|
|
begin.
|
|
|
|
## Reporting a vulnerability
|
|
|
|
Do not open a public issue for a suspected vulnerability. Contact the
|
|
maintainer through an established private channel and include the affected
|
|
commit or version, impact, reproduction steps, and any suggested mitigation.
|
|
If you do not have a private contact method, ask for one in an issue without
|
|
disclosing vulnerability details.
|
|
|
|
Do not include real SNMP credentials, `.env`, `config.ini`, `state.json`,
|
|
controller addresses, AP names, or unredacted logs. Reports will be
|
|
acknowledged and updated on a best-effort basis; please allow time for a fix
|
|
before public disclosure.
|