diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..f4c4f78 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,28 @@ +# Security Policy + +## Supported Versions +We actively support the latest version of the bot and provide security fixes for the previous stable release. + +## Reporting a Vulnerability +If you discover a security vulnerability in the bot, please report it responsibly. We ask that you **do not publicly disclose** the issue until it has been resolved. + +### How to Report +Send a detailed report to **[alexalexandramueller@gmx.de]** including: +- Steps to reproduce the issue +- Expected vs. actual behavior +- Any relevant logs or screenshots + +We will respond within **48 hours**. + +## Security Updates +Security updates will be published as new releases. Always ensure you are using the latest version to stay protected. + +## Security Best Practices for Bot Users +- **Never share your bot token publicly.** If it is compromised, regenerate it immediately. +- **Limit permissions** of the bot to only what is necessary. +- **Regularly update dependencies** to patch known vulnerabilities. +- Monitor your bot's environment for suspicious activity. + +## Acknowledgments +We appreciate all security researchers who help keep this bot safe. You will be credited (unless you request anonymity) in the release notes of the security update. +