Skip to content

Security: Rootless-Ghost/log-analyzer

SECURITY.md

Security Policy

Supported Versions

Version Supported
1.0.x

Reporting a Vulnerability

If you discover a security vulnerability in Log Analyzer, please report it responsibly:

DO NOT open a public GitHub issue for security vulnerabilities.

How to report:

  • GitHub Security Advisories: Use the "Report a vulnerability" button in the Security tab

What to include in your report:

  • Description of the vulnerability
  • Steps to reproduce
  • Potential impact
  • Suggested fix (if any)

Response timeline:

  • Initial response: Within 48 hours
  • Status update: Within 7 days
  • Fix timeline: Depends on severity (Critical: 7 days, High: 14 days, Medium: 30 days)

Security Best Practices

This project follows these security practices:

  • Dependencies are monitored via Dependabot
  • All user inputs are validated and sanitized
  • File uploads are handled in temporary directories and deleted after processing
  • Log data may contain sensitive information - never commit parsed logs to public repositories
  • The application runs on localhost only by default

There aren’t any published security advisories