Skip to content

Security: TheGittyPerson/ThePerson

.github/SECURITY.md

Security Policy

🛡️ Our Commitment

The Person is an educational tool. While we prioritize a fun and safe learning environment, we take security seriously. We encourage all contributors to follow secure coding practices.

🚩 Reporting a Vulnerability

If you discover a vulnerability, please use the "Report a vulnerability" button under Security on this repo's GitHub page.

💡 Best Practices for Contributors

As you learn Python and OOP, keep these security habits in mind:

  • No Secrets: Never commit personal information, API keys, or passwords to the repository.
  • Dependency Awareness: Be cautious when adding new third-party libraries. Stick to well-known packages and keep them updated.
  • Sanitize Input: If you add a method that takes user input, ensure it doesn't execute unintended code.

🛠️ Security Tools

We use GitHub Dependabot to automatically monitor and update our dependencies for known vulnerabilities.

There aren’t any published security advisories