Skip to content

Security: ntindle/star-citizen-events-api

.github/SECURITY.md

Security Policy

Scope

This security policy applies to the starcitizen.events API and any related projects or repositories. The starcitizen.events API is an open source project that returns details about events that happen in the game Star Citizen by Roberts Space Industries. The starcitizen.events API is not affiliated with Roberts Space Industries, Cloud Imperium Games, or any of their subsidiaries.

Supported Versions

Only the latest version of the starcitizen.events API is supported with security updates.

Reporting a Vulnerability

If you find a security vulnerability in the starcitizen.events API or any related projects, please do not disclose it publicly or create an issue on GitHub. Instead, please contact us at [email protected] with the following information:

  • A brief description of the vulnerability
  • Steps to reproduce the vulnerability or a proof-of-concept code
  • The potential impact or risk of the vulnerability
  • Your name and contact information (optional)

We will acknowledge your report within 48 hours and provide you with a unique identifier for tracking the progress of fixing the vulnerability. We will also inform you of our disclosure policy and timeline.

Disclosure Policy

We follow the principle of coordinated disclosure for security vulnerabilities. This means that we will not disclose any vulnerability details or fixes until we have developed a patch and obtained your consent. We ask that you also refrain from disclosing the vulnerability until we have released a patch and notified you.

We aim to fix any reported vulnerability within 90 days of receiving the report, depending on the severity and complexity of the issue. We will keep you updated on the status of the fix and notify you when we release a patch.

We appreciate your help in keeping the starcitizen.events API and its users safe and secure.

GPG Public Key

You can use this GPG public key block to encrypt your communications with us:

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=mUM6
-----END PGP PUBLIC KEY BLOCK-----

There aren’t any published security advisories