Skip to content

Security improvements: Enable branch protection and add SECURITY.md #207

@nickossdev

Description

@nickossdev

Security Improvements Needed

Hey there! I noticed a couple of security gaps in the repo:

  1. No branch protection on 'master'

    • OSSF Scorecard flagged this as a warning
    • Leaves the main branch vulnerable to unwanted changes
  2. Missing SECURITY.md file

    • No clear guidance on handling security issues
    • Makes it tough for people to report vulnerabilities properly

Suggestions:

  • Enable branch protection for 'master' (PR reviews, status checks, etc.)
  • Add a SECURITY.md with basics like:
    • How to report issues
    • Response timeframes
    • Supported versions

Happy to provide more details if needed.

Thanks for considering!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions