TheDude
/
openproject
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
OpenProject is the leading open source project management software.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
64081 Commits
139 Branches
203 Tags
1.2 GiB
 
 
 
 
 
 
Tag: Branch: Tree: bd3d627389
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'bd3d627389'
${ noResults }
openproject/SECURITY.md

2.3 KiB
Raw Blame History

Security Policy

At its core, OpenProject is an open-source software that is developed and published on GitHub. Every change to the OpenProject code base ends up in an open repository accessible to everyone. This results in a transparent software where every commit can be traced back to the contributor.

Automated tests and manual code reviews ensure that these contributions are safe for the entire community of OpenProject. These tests encompass the correctness of security and access control features. We have ongoing collaborations with security professionals from to test the OpenProject code base for security exploits.

Security announcements mailing list

We provide a mailing list for security advisories on OpenProject at https://groups.google.com/forum/#!forum/openproject-security. Please register there to get immediate notifications as we publish them. No messages except for security advisories or security related announcements will be sent there.

Any security related information will also be published on our blog and website at https://www.openproject.com

To join this mailing list, please use the UI if you have a google account. If you don't, you can send an empty email to openproject-security+subscribe@googlegroups.com. You will get a join request, which you again have to reply with any content.

To unsubscribe, you will find a link at the end of every submission.

Reporting a vulnerability

We take all facets of security seriously at OpenProject. If you want to report a security concerns, have remarks, or contributions regarding security at OpenProject, please reach out to us at security@openproject.com.

If you can, please send us a PGP-encrypted email using the following key:

Please include a description on how to reproduce the issue if possible. Our security team will get your email and will attempt to reproduce and fix the issue as soon as possible.