We take the security of cf-docker-tunnel-sync seriously. If you discover a security vulnerability, please report it responsibly so we can address it before public disclosure.

Please do not disclose potential security vulnerabilities through public GitHub issues.

Instead, submit your report securely via:

1. GitHub Security Advisory (Recommended): Submit a private report at https://github.com/hapheus/cf-docker-tunnel-sync/security/advisories/new.
2. Email: Contact the project maintainers at security@hapheus.com.

• Initial Response: We will acknowledge receipt of your vulnerability report within 48 hours.
• Triage & Assessment: We will investigate and confirm the report within 7 days.
• Fix & Coordinated Disclosure: We aim to release a patched version and publish a coordinated advisory within 30 days.
• Credit: Reporters will be acknowledged in release notes and security advisories unless they request anonymity.