yawan
f7fc992f57
Anydoc / anydoc parser engine (push) Canceled after 0s
App / Format, vet, test, and build (push) Canceled after 0s
CLI / test (macos-latest / go 1.26) (push) Canceled after 0s
CLI / test (ubuntu-latest / go 1.26) (push) Canceled after 0s
CLI / test (windows-latest / go 1.26) (push) Canceled after 0s
Build and Push Docker Image / build-ui (push) Canceled after 0s
Build and Push Docker Image / build-docreader (push) Canceled after 0s
Build and Push Docker Image / build-sandbox (push) Canceled after 0s
Build and Push Docker Image / build-app (amd64, linux/amd64, ubuntu-latest) (push) Canceled after 0s
Build and Push Docker Image / build-app (arm64, linux/arm64, ubuntu-24.04-arm) (push) Canceled after 0s
DocReader / Python tests and Go client tests (push) Canceled after 0s
Build & Publish (dsh-weknora) / Typecheck, test, pack (push) Canceled after 0s
Build & Publish (dsh-weknora) / End-to-end inside dsh (pinned) (push) Canceled after 0s
Build & Publish (dsh-weknora) / End-to-end inside dsh (latest, advisory) (push) Canceled after 0s
Frontend / Test, type-check, and build (push) Canceled after 0s
Go Lint Cache / warm lint cache (.) (push) Canceled after 0s
Go Lint Cache / warm lint cache (cli) (push) Canceled after 0s
Go Lint Cache / warm lint cache (client) (push) Canceled after 0s
Build & Publish (mcp-server) / Test (Python 3.10) (push) Canceled after 0s
Build & Publish (mcp-server) / Test (Python 3.11) (push) Canceled after 0s
Build & Publish (mcp-server) / Test (Python 3.12) (push) Canceled after 0s
Build & Publish (mcp-server) / Test (Python 3.13) (push) Canceled after 0s
Build and Push Docker Image / merge (push) Canceled after 0s
Build & Publish (dsh-weknora) / Publish to npm (push) Canceled after 0s
Build & Publish (mcp-server) / Build sdist + wheel (push) Canceled after 0s
Build & Publish (mcp-server) / Publish to PyPI (push) Canceled after 0s
47 lines
1.5 KiB
Markdown
47 lines
1.5 KiB
Markdown
# Security Policy
|
||
|
||
## Reporting a Vulnerability
|
||
|
||
The WeKnora team takes security vulnerabilities seriously.
|
||
We appreciate your efforts to responsibly disclose any security issues you discover.
|
||
|
||
⚠️ **Please do NOT report security vulnerabilities through public GitHub issues.**
|
||
|
||
### Preferred reporting method
|
||
|
||
We recommend reporting security vulnerabilities using GitHub’s private vulnerability reporting feature:
|
||
|
||
1. Go to the **Security** tab of this repository
|
||
2. Click **“Report a vulnerability”**
|
||
3. Fill in the details and submit the report
|
||
|
||
This allows us to discuss, investigate, and fix the issue privately.
|
||
|
||
### Alternative contact
|
||
|
||
If you are unable to use GitHub’s Security Advisory feature, you may contact the maintainers through the repository owners.
|
||
|
||
> Please avoid sharing sensitive information publicly.
|
||
|
||
### What to include in your report
|
||
|
||
To help us understand and resolve the issue quickly, please include:
|
||
|
||
- A clear description of the vulnerability
|
||
- Steps to reproduce (proof-of-concept if available)
|
||
- The affected version(s)
|
||
- Potential impact and severity
|
||
- Any suggested mitigations or fixes (if known)
|
||
|
||
### Response timeline
|
||
|
||
We aim to:
|
||
- Acknowledge receipt of your report within **48 hours**
|
||
- Provide a status update as the investigation progresses
|
||
|
||
### Coordinated disclosure
|
||
|
||
We kindly ask reporters to follow responsible disclosure practices and allow us reasonable time to address the issue before any public disclosure.
|
||
|
||
Thank you for helping keep **WeKnora** and its users secure.
|