This project maintains security updates for the following versions:
| Version | Supported |
|---|---|
| Latest | ✅ |
If you discover a security vulnerability, please report it responsibly:
- DO NOT open a public issue
- Email the maintainer directly (if personal project) or use GitHub's private vulnerability reporting
- Include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)
- Never commit
.envfiles - Regenerate tokens if accidentally exposed
- Use strong, unique tokens
- Use minimal required permissions
- Regularly audit bot permissions
- Remove unused permissions
- Keep dependencies updated
- Monitor for security advisories
- Use
pip auditto check for vulnerabilities
This bot template includes:
- Environment variable configuration
- Secure token handling
- Input validation in commands
- Error handling to prevent information leakage
For security concerns, please contact [your-email@example.com] or create a private security advisory on GitHub.