Skip to content

Security: ericodx/swift-cpd

Security

.github/SECURITY.md

Security Policy

Supported Versions

Swift Code Duplication Detector is currently under active development.

Only the latest release is supported with security updates.

Pre-release versions (0.x) do not carry stability or security guarantees.

Version Supported
1.x.x ✓ Supported

Reporting a Vulnerability

If you discover a security vulnerability in Swift Code Duplication Detector, please do not open a public issue.

Instead, report it privately by opening a GitHub Security Advisory:

  1. Go to the repository on GitHub
  2. Click on Security
  3. Select Report a vulnerability
  4. Provide:
    • A clear description of the issue
    • Steps to reproduce (if applicable)
    • Potential impact

All reports will be reviewed promptly.


Scope

This security policy applies to:

  • The SwiftCPD CLI (swift-cpd)
  • The SwiftCPD Build Tool Plugin
  • Distribution artifacts
  • Configuration handling (.swift-cpd.yml)

It does not cover:

  • Third-party dependencies beyond their own advisories
  • Misuse of the tool outside documented behavior

Disclosure Process

  • Vulnerabilities are triaged privately
  • Fixes are developed and tested
  • A release is published with appropriate notes
  • Credit is given when requested

We aim to balance transparency with user safety.


Responsible Disclosure

We kindly ask reporters to allow reasonable time for investigation and fixes before any public disclosure.

Thank you for helping keep Swift Code Duplication Detector secure.

There aren’t any published security advisories