Add Contributor Covenant v2.1 and security vulnerability reporting guide to improve GitHub Community Health score.
837 B
837 B
Security Policy
Supported Versions
| Version | Supported |
|---|---|
| latest | ✅ |
Reporting a Vulnerability
If you discover a security vulnerability, please report it responsibly:
- Do NOT open a public issue.
- Use the GitHub Security Advisory to report privately.
- Include steps to reproduce, potential impact, and any suggested fixes.
We will acknowledge your report within 5 business days and work with you to resolve the issue.
Scope
This policy applies to the HKUDS/Vibe-Trading repository.
Disclosure
- Please do not publicly disclose the vulnerability until we have released a fix.
- We will credit reporters in the release notes (unless you prefer anonymity).