Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability, report it privately by email:

Primary contact: akintunero101@gmail.com
Subject line: SECURITY: edge-deployment-manager

Please include:

Affected version/commit
Reproduction steps or proof-of-concept
Impact assessment
Suggested remediation (if available)

Response SLA

Initial acknowledgement: within 72 hours
Triage and severity assessment: within 7 days
Remediation target:
- Critical/High: 30 days
- Medium/Low: 90 days

Supported Versions

Only the latest release on main is actively supported for security fixes.

Disclosure Process

Please do not open public issues for unpatched vulnerabilities. We will coordinate disclosure after a fix is released.

There aren't any published security advisories