Skip to content

Repository navigation

Security: devicechain-io/devicechain

Security

SECURITY.md

Security Policy

Reporting a vulnerability

Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.

Instead, email admin@devicechain.io with:

  • A description of the vulnerability and its potential impact.
  • Steps to reproduce (proof-of-concept, affected version/commit, configuration).
  • Any suggested remediation, if you have one.

You can expect an initial acknowledgement within a few business days. We will work with you to understand and validate the issue, and we will keep you informed of the remediation progress. Please give us a reasonable opportunity to release a fix before any public disclosure (coordinated disclosure).

Supported versions

DeviceChain is pre-1.0 and under active development. Security fixes are applied to the main branch. Until a 1.0.0 release, only main is supported; there are no backported patch releases.

Scope

This policy covers the DeviceChain source in this repository. For issues in third-party dependencies, please also report upstream where appropriate.

DeviceChain is stewarded by IoT Innovations, LLC.

There aren't any published security advisories