At Edge Robotics Studio, we take the security of our projects, website, and users seriously. We appreciate the efforts of security researchers and community members who help us identify and responsibly report security vulnerabilities.

Security updates will generally be provided for the latest maintained version.

If you discover a potential security vulnerability in this repository, please report it responsibly.

Please do not disclose security vulnerabilities through public GitHub issues, discussions, or pull requests.

We encourage you to use GitHub's Private Vulnerability Reporting:

Report a vulnerability

If private reporting is unavailable, contact the maintainers through the official Edge Robotics Studio website:

https://edgeroboticsstudio.com/

Please avoid sharing sensitive vulnerability details publicly.

To help us investigate the issue, please include:

• A clear description of the vulnerability.
• The affected file, component, page, or dependency.
• Steps to reproduce the issue.
• Potential security impact.
• Screenshots or proof of concept, if applicable.
• Suggested remediation, if available.

We aim to:

• Acknowledge security reports within 7 business days.
• Review and assess the reported vulnerability.
• Communicate with the reporter during the investigation.
• Work towards an appropriate fix or mitigation.
• Coordinate responsible public disclosure after the issue has been addressed.

Response and resolution times may vary depending on the severity and complexity of the issue.

This policy applies to security vulnerabilities affecting:

• Edge Robotics Studio website and source code.
• Dependencies used by this repository.
• GitHub Actions workflows and automation.
• Repository configuration and deployment processes.
• Other components directly maintained within this repository.

Third-party services and infrastructure outside our control are not covered by this policy.

When investigating a potential vulnerability, please:

• Avoid accessing, modifying, or deleting other people's data.
• Do not disrupt website availability or services.
• Avoid destructive testing.
• Do not publicly disclose vulnerabilities before coordinating with the maintainers.
• Stop testing if you encounter sensitive information and report it responsibly.

We appreciate everyone who helps improve the security of Edge Robotics Studio through responsible vulnerability reporting.

With the reporter's permission, we may acknowledge their contribution in security announcements or project documentation.

Edge Robotics Studio

Website: https://edgeroboticsstudio.com/

GitHub: https://github.com/edgeroboticsstudio/ers

Empowering people to innovate through technology.