Skip to content

Security: amasen02/fastdl

Security

.github/SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in this project, please report it privately. Do not disclose vulnerabilities via public GitHub issues or discussions.

  • Email: amabandarasp@gmail.com
  • Subject: [SECURITY] <Project Name> Vulnerability Report
  • SLA: Initial acknowledgement within 72 hours.

Coordinated Disclosure

We follow a 90-day coordinated disclosure timeline. Fixes will be prepared, verified with automated tests, and released in a patch version before public CVE / advisory disclosure.

Security Controls in Force

  • Supply Chain Security: Dependencies tracked via Dependabot with weekly automated vulnerability audits.
  • Scorecard Analysis: OpenSSF Scorecard supply-chain security pipeline running v2.4.4.
  • Automated Code Scanning: Static analysis and branch protection rules enforce clean tests before merge.

There aren't any published security advisories