Skip to content

Security: JampaniKomal/Auditable

Security

SECURITY.md

Security Policy

Auditable is a deliberately insecure training repository. The vulnerabilities in the scenarios are intentional and part of the exercise.

Supported Scope

  • Documentation issues
  • Repository hygiene and packaging issues
  • Broken scenario builds that prevent local training
  • Problems with the intended audit workflow
  • Unintended vulnerabilities (a dependency advisory unrelated to any lesson, or anything that exposes a scenario beyond localhost)

Out of Scope

  • Requests to remove the intentional weaknesses from the training scenarios, unless the request is specifically about repository quality or documentation

Reporting a Problem

If you find an unintended issue in the repository, open an issue or email jampanikomal2005@gmail.com with:

  • Scenario name
  • Exact file or command
  • Reproduction steps
  • Expected versus actual result

For urgent repository safety concerns, prefer that private email over a public issue.

There aren't any published security advisories