At Step Functions, we take security seriously. This security policy explains how we address security in our project.

If you believe you have discovered a security vulnerability in our project, please report it to us immediately. You can report security issues by sending an email to koralixstudios@gmail.com.

We take all reports seriously and will investigate them promptly. After submitting a report, you can expect us to contact you within 7 days to ask for more details.

If you know how to fix the issue, you are welcome to submit a pull request with your proposed fix. Please follow the guidelines in our CONTRIBUTING guide when submitting a pull request.

We have several measures in place to ensure the security of our code and data. These measures include enforcing secure coding practices, performing code reviews, and running automated tests.

We actively manage vulnerabilities in our project. When a vulnerability is identified, we start planning the steps to correct it. If the correction requires extended time, we will release a patch to disable the feature causing the problem.

In the event of a security incident, we have an incident response plan in place. We will notify users about the state of the correction process through our Discord server and Twitter account.

Thank you for helping us keep Step Functions secure! ❤️