Skip to content

Security: St0rmM4st3r/Discord

Security

SECURITY.md

Security policy

Warden in this repository is an unverified historical snapshot. It has not received a documented security audit, and no production versions are currently supported.

Known areas requiring review

  • The bot source contains fallback database credentials; remove them before production use.
  • The PostgreSQL Compose file publishes TCP port 5432 on the host.
  • Account-linking tokens, player mappings, and bot permissions require dedicated review.
  • Environment secrets must never be committed, logged, or shared in public reports.

Private disclosure

Do not open public issues with live credentials, exploit steps, or account-linking bypass details. Contact the repository owner through their GitHub profile to arrange confidential reporting, or use GitHub private vulnerability reporting if enabled for this repository.

Please include the affected file, safe impact description, environment, and a minimal sanitized reproduction. No security response-time guarantee is currently published.

There aren't any published security advisories