Skip to content

Latest commit

 

History

History
41 lines (29 loc) · 2.09 KB

SECURITY.md

File metadata and controls

41 lines (29 loc) · 2.09 KB

Security Policy

NOTE: This is not a place for reporting general bugs. Use Issues for that purpose.

If you have a reasonable suspicion the problem could be exploited by a malicious actor, this is the right place to report it. If you are not sure, err on the side of caution.

Supported Versions

Please confirm that you have pulled the latest commit before sending.

Reporting a Vulnerability

To report a vulnerability, you can use either the private reporting feature I have set up for this repository or send me a PM on the Farms.

Please provide as much information as possible so I can locate the vulnerability, reproduce it, determine severity, and fix it.

Use of PGP is not required and I won't yell at you if you don't use it in private report, but I highly recommend becoming familiar with using it. GnuPG is not as intimidatingly complex as it may seem.

My current PGP public key Fingerprint: 642C FE9F 8CB6 CAE2 7D54 8B4F EDBC ECF8 9301 0AEF

-----BEGIN PGP PUBLIC KEY BLOCK-----

mDMEZS6NBRYJKwYBBAHaRw8BAQdAN0H7kBhsDwQ7k0iCWpZlDdAcCydbU8kioAfn zsVmqna0NHkgYSB0IHMgPDE0MDMzNzk2Myt5LWEtdC1zQHVzZXJzLm5vcmVwbHku Z2l0aHViLmNvbT6ImQQTFgoAQRYhBGQs/p+MtsrifVSLT+287PiTAQrvBQJlLo0F AhsDBQkDwmcABQsJCAcCAiICBhUKCQgLAgQWAgMBAh4HAheAAAoJEO287PiTAQrv O7QBAL0gQn5FXXqXSVb8CBfiqIuX+9oA5FVYGcPm/+vevhD+AQC7B7JZ81AVl1L8 WUF1GowQxTz4dZogqVuqaQZ6EruHCrg4BGUujQUSCisGAQQBl1UBBQEBB0DwM+YA qikoUgj3wd9al14sM4zDCKow+osv9vZl2ef5GAMBCAeIfgQYFgoAJhYhBGQs/p+M tsrifVSLT+287PiTAQrvBQJlLo0FAhsMBQkDwmcAAAoJEO287PiTAQrvYsYA/0oL vpAVu43o93tptZc7o02Ma0J6Hv4SxoODWPEe0qUyAQCv3O8t9dXoOjfXHMSFeeIG vXQlWmKDOPozBYKk1RPfAQ== =HS0H -----END PGP PUBLIC KEY BLOCK-----

The above PGP key is the same one used to sign all of my (y-a-t-s) commits. Any changes to it should only be trusted if made in a verified (signed) commit by me. Key changes will also be announced by me in a status on my forum profile. The commit signing key is set in my account settings and requires a lot of verification to change. If, God forbid, I need to change it, that will be the first place I do so.