Skip to content

Security: scailetech/openinvoice

Security

SECURITY.md

Security Policy

Supported Versions

Use this section to tell people about which versions of your project are currently being supported with security updates.

Version Supported
Latest ✅

Reporting a Vulnerability

Please report security vulnerabilities to: security@yourdomain.com

We will respond within 24 hours and provide updates every 72 hours until resolution.

Security Features

This repository has the following security features enabled:

  • ✅ Secret scanning with push protection
  • ✅ Dependency vulnerability scanning
  • ✅ Automated security updates
  • ✅ Private vulnerability reporting
  • ✅ Code scanning with CodeQL

Development Security

All developers must:

  1. Use branch protection rules
  2. Enable 2FA on GitHub accounts
  3. Sign commits with GPG keys
  4. Never commit secrets or API keys
  5. Run security scans before merging

There aren’t any published security advisories