From 1e52b1faff94f241e72fe09c2f1db774e0c21979 Mon Sep 17 00:00:00 2001 From: aminnairi <18418459+aminnairi@users.noreply.github.com> Date: Fri, 5 Jan 2024 12:36:47 +0100 Subject: [PATCH] added best practice section in the security guidelines --- SECURITY.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/SECURITY.md b/SECURITY.md index b3947d1..5516bc8 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,5 +1,15 @@ # Security Policy +## Best practices + +If you need to fork this repository, or propose changes through pull request, be sure to not commit any sensitive informations. + +These informations can the the following form, without being an exhaustive list: + +- Credentials files (`.aws/credentials`, `.npmrc`, ...) +- Environment variables (`JWT_SECRET`, `DATABASE_PASSWORD`, ...) +- Personal informations (name, address, email, ...) + ## Reporting a Vulnerability You just found a vulnerability in this repository and want to contribute to a safer environment.