Skip to content

Security: TheGittyPerson/ThePerson

.github/SECURITY.md

Security Policy

Our Commitment

ThePerson is an educational tool. While we prioritize a fun and safe learning environment, we take security seriously. We encourage all contributors to follow secure coding practices.

Reporting a Vulnerability

If you discover a vulnerability, please use the "Report a vulnerability" button under Security on this repo's GitHub page.

Best Practices for Contributors

As you learn Python and OOP, keep these security habits in mind:

  • No Secrets: Never commit personal information, API keys, or passwords to the repository.
  • Dependency Awareness: Be cautious when adding new third-party libraries. Stick to well-known packages and keep them updated.
  • Sanitize Input: If you add a method that takes user input, ensure it doesn't execute unintended code.

Security Tools

We use GitHub Dependabot to automatically monitor and update our dependencies for known vulnerabilities.

There aren't any published security advisories