I provide security updates for the following versions of Guard Agent:
| Version | Supported |
|---|---|
| 3.x | ✅ bug and security fixes |
| 2.x | ✅ security fixes only |
I take the security of Guard Agent seriously. If you believe you've found a security vulnerability, please follow these steps:
-
Do not disclose the vulnerability publicly until I have fixed it.
-
Report the vulnerability through GitHub's security advisory feature:
- Go to the Security tab of the Guard Agent repository
- Click on "New draft security advisory"
- Fill in the details of the vulnerability
- Submit the advisory
Alternatively, you can report vulnerabilities through GitHub's private vulnerability reporting feature.
-
Include the following information in your report:
- A description of the vulnerability and its potential impact
- Steps to reproduce the issue
- Affected versions
- Any potential mitigations or workarounds
I will acknowledge your report within 48 hours and send a detailed response within 7 days, including the next steps in handling the vulnerability.
When using Guard Agent in your applications, consider the following security best practices: