Skip to content

Security: equinor/appsec-fundamentals-secret-scanning

Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in this project, please follow these steps to responsibly disclose it:

The following information will help us triage your report more quickly:

  • Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.)
  • Full paths of source file(s) related to the manifestation of the issue
  • The location of the affected source code (tag/branch/commit or direct URL)
  • Any special configuration required to reproduce the issue
  • Step-by-step instructions to reproduce the issue
  • Proof-of-concept or exploit code (if possible)
  • Impact of the issue, including how an attacker might exploit the issue

We prefer all communications to be in English.

Secrets Used for Training Purposes

This repository contain invalid secrets used for training purposes. These secrets should not be reported as vulnerabilities.

There aren’t any published security advisories