Security

SECURITY.md

Security Policy

Reporting Security Vulnerabilities

Please email [email protected] for vulnerabilities. We aim to acknowledge within 72 hours.

Supported Versions

Version	Supported
1.0.x	✅

Security Features

HMAC-SHA256 vote verification with cryptographic proofs
Ed25519 signature verification for Discord webhooks
HMAC-SHA256 signature verification for Slack webhooks
Environment variable protection for secrets
No client-side secret exposure

There aren’t any published security advisories