We actively support the following versions with security updates:

We take security vulnerabilities seriously. If you discover a security vulnerability, please follow these steps:

Important: Do not open a public GitHub issue for security vulnerabilities. This could expose the vulnerability to malicious actors.

Please report security vulnerabilities privately using one of the following methods:

• Email: security@tridention.com
• GitHub Security Advisory: Use the "Report a vulnerability" button on the repository's Security tab
• Private communication: Contact the maintainers directly

When reporting a vulnerability, please include:

• Description: Clear description of the vulnerability
• Impact: Potential impact of the vulnerability
• Steps to reproduce: Detailed steps to reproduce the issue
• Affected versions: Which versions are affected
• Suggested fix: If you have suggestions for fixing the issue

• Initial response: Within 48 hours
• Status update: Within 7 days
• Resolution: As soon as possible, typically within 30 days

• We will acknowledge receipt of your report within 48 hours
• We will provide regular updates on the status of the vulnerability
• We will work with you to understand and resolve the issue
• We will credit you in the security advisory (if you wish)

• We will not disclose the vulnerability publicly until a fix is available
• We will coordinate with you on the disclosure timeline
• We will credit you in the security advisory and release notes

• Do not commit secrets, API keys, or credentials
• Use environment variables for sensitive configuration
• Follow secure coding practices (see docs/development/coding-standards.md)
• Report security issues privately

• Keep your dependencies up to date
• Use strong authentication
• Follow security best practices for your environment
• Report security issues promptly

• Dependabot: Automated dependency updates and security alerts
• CodeQL: Static code analysis for security vulnerabilities
• Secret Scanning: Automatic detection of secrets in code
• Security Advisories: Public disclosure of security issues

• Security Documentation
• Contributing Guidelines
• Development Guide

For security-related questions or concerns, please contact:

• Email: security@tridention.com
• Organization: Tridention

Thank you for helping keep Accellens and our users safe!