mirror of
https://github.com/NicolasBohn/NexQuant.git
synced 2026-07-28 16:07:46 +00:00
TPTBusiness
a5a0a3c6f9
SECURITY.md: - Removed placeholder email (nico@predix.io) - Added GitHub Security Advisories link - Added clear reporting process CONTRIBUTING.md: - Added Predix-specific development workflow - Branch naming conventions (feat/, fix/, docs/, etc.) - Conventional commit format with examples - Test requirements (>80% coverage) - Pre-commit hooks requirements - Project structure overview - Never/Always commit rules
22 lines
796 B
Markdown
22 lines
796 B
Markdown
# Security Policy
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
We take the security of Predix seriously. If you believe you have found a security vulnerability, please report it responsibly.
|
|
|
|
**Please do not report security vulnerabilities through public GitHub issues.**
|
|
|
|
### How to Report
|
|
|
|
1. **Open a private security advisory** on GitHub: https://github.com/TPTBusiness/Predix/security/advisories
|
|
2. Provide a detailed description of the vulnerability
|
|
3. Include steps to reproduce if possible
|
|
4. We will respond within 48 hours
|
|
|
|
### What to Expect
|
|
|
|
- We will acknowledge your report within 48 hours
|
|
- We will investigate and provide updates regularly
|
|
- Once resolved, we will credit you in the release notes (if desired)
|
|
- Please allow reasonable time for us to address the issue before public disclosure
|