Skip to content

SECURITY.md

Latest commit

 

History

History
22 lines (15 loc) · 882 Bytes

SECURITY.md

File metadata and controls

22 lines (15 loc) · 882 Bytes
Raw

Security Policy

Sail Scoring runs as a hosted service at app.sailscoring.ie, holding club and class racing data. Security reports are taken seriously.

Reporting a vulnerability

Please report vulnerabilities privately — do not open a public issue:

  • Preferred: GitHub's private vulnerability reporting — use Report a vulnerability under this repository's Security tab.
  • Or email mark@hyc.ie.

Include what you found, how to reproduce it, and what impact you believe it has. Reports are acknowledged within 72 hours. Please give us a reasonable window to fix an issue before disclosing it publicly.

Scope

The application (app.sailscoring.ie), its REST API (/api/v1/...), and the published-results pages (/p/...). Denial-of-service findings and reports requiring physical access to a user's device are out of scope.