Skip to content

Security: etis-framework/community

Security

SECURITY.md

Security and Sensitive Information

Scope

This repository primarily contains community documentation and GitHub Discussion configuration. It is not an executable ETIS product.

The most likely security and privacy risks here are therefore information-disclosure risks rather than software vulnerabilities.

Do Not Post Sensitive Information

Do not place the following in Discussions, pull requests, commits, or repository files:

  • passwords, tokens, keys, credentials, or secrets;
  • non-public personal information;
  • protected student or educational records;
  • confidential client or employer information;
  • proprietary source code you are not authorized to publish;
  • restricted government or law-enforcement information;
  • non-public vulnerability details that could create unnecessary risk.

Use sanitized or synthetic examples when possible.

If Sensitive Information Is Accidentally Posted

Act quickly:

  1. Remove or redact the public content where possible.
  2. Rotate any exposed credentials or secrets immediately.
  3. Notify an ETIS maintainer through an established private channel.
  4. If the issue involves GitHub itself, follow GitHub's official security or abuse-reporting process.

Deleting a visible post may not eliminate copies, notifications, forks, caches, or Git history. Treat exposed credentials as compromised.

Vulnerabilities in Other ETIS Projects

Report a vulnerability against the repository or product that actually contains the affected code or service. Follow that project's SECURITY.md or private vulnerability-reporting process when available.

Do not publish exploit details in this community repository merely to attract attention to the report.

There aren't any published security advisories