Skip to content

SECURITY.md

Latest commit

 

History

History
41 lines (25 loc) · 1.57 KB

SECURITY.md

File metadata and controls

41 lines (25 loc) · 1.57 KB
Raw

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in this integration, please report it privately by creating a security advisory on GitHub.

Please do NOT open a public issue for security vulnerabilities. This allows us to address the issue before it becomes public knowledge.

Security Considerations

Network Communication

This integration communicates with your local network only:

  • Keep your Home Assistant instance on a secure network

Credential Storage

ARP-Scan setup details (IP addresses and subnets to scan) are stored in Home Assistant's configuration:

  • Keep your configuration.yaml and Home Assistant configuration secure
  • Do not share your Home Assistant backups without sanitizing sensitive data

Best Practices

  1. Keep Home Assistant updated - Security patches are released regularly
  2. Install from official sources - Use HACS or official GitHub releases
  3. Review the code - As an open-source project, you can audit the code before use
  4. Secure your network - Restrict access to your Home Assistant instance
  5. Use strong authentication - Enable Home Assistant's user authentication

Disclosure Timeline

When a vulnerability is confirmed:

  1. We will assess the severity and impact
  2. A fix will be prepared for the latest version
  3. A new release will be published
  4. A security advisory will be published on GitHub (with credit to the reporter if desired)

Thank you for helping keep this project secure!