Skip to content
This repository has been archived by the owner on Dec 26, 2021. It is now read-only.

Security: vlee489/Turnip-Bot

Security

SECURITY.md

Security Policy

If you find a security vulnerability in the bot this is the process to disclose it.

Supported Versions

Version Supported
Working Master
Alpha 5.0
< Alpha 5.0

Reporting a Vulnerability

Data needed for discolosure.

  • Bot Version from the Bot via <stats command
  • Brief deciption of the issue
  • reproduction steps
  • More detailed explination.

The prefered way of disclosing Security Vulnerability via GitHub's builit in secuity feature over at the Security Tab. A reply will usually be given within 48 hours of disclosure, with a time frame to correct issues of 30 days or less.

During this 30 day period Security advisories should stay as a draft to give adiquate time to correct the issue at hand. After this 30 day period or when the issue is patches (Which ever comes first), the Security advisories may then be published along with the related patches.

Another way of disclosing issues is directly DMing Vincent/vlee489#5801 on the Discord bot support server

There aren’t any published security advisories