Skip to content

SECURITY.md

Latest commit

 

History

History
33 lines (24 loc) · 1.13 KB

SECURITY.md

File metadata and controls

33 lines (24 loc) · 1.13 KB
Raw

🇻🇪 Leer en Español

Security Policy - YapuCli

Reporting a Vulnerability

Please do not report security vulnerabilities through public GitHub issues.

Instead, please send a security report via email to: vikruzdavid@gmail.com

Please include:

  • A detailed description of the vulnerability.
  • Precise steps to reproduce the issue.
  • The potential impact on runtime environments.
  • Suggestions for a fix or mitigation (optional).

Response and Resolution Times

  • Acknowledgment of receipt: Within 48 working hours.
  • Initial evaluation: Within a maximum of 1 week.
  • Remediation timeframe: Varies according to the estimated severity:
    • Critical: Between 24 and 48 hours.
    • High: Within 1 week.
    • Medium/Low: Included in the next scheduled release.

Scope

This policy covers vulnerabilities identified in the Yapu framework that could:

  • Allow unauthorized arbitrary code execution on user machines.
  • Compromise API keys or local credentials of Antigravity CLI.
  • Corrupt the project's static context (PROJECT.md, ROADMAP.md, STATE.md).