Security Policy

Scope

This repository holds teaching material and synthetic data. It holds no real personal data and no research data. A security issue here is, for example, a leaked token, a workflow that an attacker can misuse, or a screenshot that shows private information.

Reporting a Vulnerability

Do not open a public issue for a security problem. Contact @maehr privately with the contact details on that GitHub profile. Include these items:

  1. A description of the issue.
  2. The steps that reproduce the issue.
  3. The affected files, pages, or workflows.
  4. A possible fix, if you know one.

This project follows a 90-day disclosure timeline.

Private Information In Screenshots

If a screenshot in assets/screenshots/ shows private information, report it in the same private way. The maintainer removes the image and replaces it.

Back to top