We deploy critical security updates to the following versions of Cloud Cleaner Dashboard:
| Version | Supported |
|---|---|
| 1.0.x | ✅ |
| 0.1.x | ❌ |
We take the security of this project seriously. If you have found a security vulnerability, we would appreciate it if you could report it to us privately.
Please do not report security vulnerabilities through public GitHub issues.
To report a vulnerability, please create issue on GitHub repository.
In your report, please include:
- A description of the vulnerability.
- Steps to reproduce the vulnerability.
- Any relevant logs or screenshots.
We will acknowledge your report within 48 hours and will work to verify and resolve the issue as quickly as possible.
- Never commit credentials or secrets to the repository (e.g., in
.envfiles). - Use environment variables for all sensitive configuration.
- The
.env.examplefile is provided as a template and should not contain real secrets.
- We use
npm auditandpip-audit(orbandit) to regularly check for vulnerabilities in our dependencies. - Please ensure you run these checks before submitting a PR.