We take security issues seriously. We appreciate your efforts to responsibly disclose your findings.

Please DO NOT report security vulnerabilities through public GitHub issues.

Instead, please follow these steps:

1. Open an issue in github repo
2. Include steps to reproduce the issue if possible
3. Include the potential impact of the vulnerability
4. Allow time for us to address the issue before any public disclosure

When you report a vulnerability:

• We'll provide a more detailed response within 7 days, indicating next steps
• We'll keep you informed about our progress resolving the issue

• Use env variables or secure storage for your API keys. DO NOT HARDCODE ANY API KEYS!
• Use the latest version of DocDog
• Use a venv to isolate dependencies

Upon receiving a security report, we will:

1. Confirm the vulnerability
2. Determine its impact and severity
3. Develop and test a fix
4. Release a patch and disclose the vulnerability (without technical details that could be exploited)

Thank you!