mirror of
https://github.com/joaovitoriasilva/endurain.git
synced 2026-01-08 23:38:01 -05:00
d265be67bc
Introduces secure reading of sensitive environment variables (DB_PASSWORD, SECRET_KEY, FERNET_KEY) via _FILE variants for Docker secrets. Updates backend to use new read_secret utility, adds validation for Fernet keys, and documents usage in advanced setup guide. Bumps version to 0.15.3 and provides a docker-compose secrets example.
726 B
726 B
Security Policy
Supported Versions
| Version | Supported |
|---|---|
| 0.15.X | ✅ |
| 0.14.X and earlier | ❌ |
Reporting a Vulnerability
If you discover a security vulnerability, please follow these steps:
- Do not open a public issue;
- Send an email to joao@endurain.com with the details of the vulnerability;
- Include the following in your report:
- Steps to reproduce the vulnerability;
- Potential impact;
- Any suggested fixes, if available.
- I will provide an acknowledgment when possible.
Please include as much information as possible to help me resolve the issue promptly.
Thank you for helping keep this project secure!