At AutoCommitter, we take security seriously and are committed to addressing vulnerabilities promptly. If you discover a security issue, we kindly ask that you report it to us in a responsible manner, following the steps below.
- Do not create public issues or pull requests related to security vulnerabilities.
- Please report vulnerabilities directly to us via the GitHub issues page. When submitting your issue, make sure to provide enough details for us to reproduce and assess the vulnerability.
- A clear description of the vulnerability and how it was discovered.
- Steps to reproduce the issue, if applicable.
- Any relevant error messages, logs, or code snippets that can help us understand the problem.
- Your preferred contact method, if you'd like us to reach out to you.
Once we receive your report, we will review it and follow up accordingly.
- Initial Response: We will acknowledge receipt of your report within 48 hours and provide an estimated timeline for resolution.
- Investigation: We will investigate the reported vulnerability and work to identify and confirm the issue.
- Fix Release: Once the issue is confirmed, we will work on a fix. We will then release an update or patch.
- Public Disclosure: After the issue is resolved, we may publish a brief security advisory in the repository to notify others and inform the community about the fix.
We aim to address all security vulnerabilities within 30 days of receiving a report. In cases where a fix may take longer, we will communicate openly with the reporter and provide updates as necessary.
We greatly appreciate security researchers and community members who help us improve the safety and security of our project. All reports are treated with the utmost confidentiality, and we are committed to working with you to ensure that any issues are addressed properly without putting users or the project at risk.
We value your help in keeping AutoCommitter safe for everyone. By reporting security vulnerabilities responsibly, you contribute to making this project a safer and better place for everyone.