HooksKit/SECURITY at master · CISCODE-MA/HooksKit · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
# Security Policy

The CISCODE team takes security seriously.

---

## Supported Versions

Only the latest released minor version receives security updates.

| Version  | Supported |
| -------- | --------- |
| >= 1.x.x | ✅ Yes    |
| < 1.x.x  | ❌ No     |

---

## Reporting a Vulnerability

⚠️ **Do NOT open a public GitHub issue for security vulnerabilities.**

Instead, please email us with:

- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)

We will acknowledge your report within 48 hours and provide updates.

---

## Security Best Practices

When using this package:

- Keep dependencies updated
- Never expose API keys or secrets in component code
- Use secure HTTP headers (CSP, X-Frame-Options, etc.)
- Validate all data from external sources
- Use HTTPS for all API communication
- Enable security scanning in your CI/CD pipeline

---

**Thank you for responsibly disclosing security vulnerabilities.**