Skip to content

Security: Chalwk/SAPPDiscordBot

SECURITY.md

Security Policy for SAPPDiscordBot

Supported Versions

Version Supported
1.0.x
< 1.0

Please upgrade to the latest 1.0.x release for security patches and improvements.

Reporting a Vulnerability

Security is important. To report a vulnerability:

  1. Contact Method: Send a detailed report to jericho.crosby227@gmail.com or a private message on HSP Discord.
  2. Information to Include:
    • Bot version (check the top of your README.md or sapp_bot_config.json)
    • Operating system and Java version
    • Steps to reproduce the issue
    • Relevant logs or screenshots
    • Halo server details, if relevant (SAPP version, scripts, etc.)
  3. Response Time: We aim to acknowledge all reports within 72 hours.
  4. Follow-Up: Verified vulnerabilities will be addressed and fixed in a patch release.

What Not to Do

  • Do not share Discord Bot Tokens or credentials publicly.
  • Do not post security vulnerabilities publicly (GitHub issues or Discord) before reporting them privately.
  • Do not attempt exploits on servers you do not own or manage.

Thank you for helping keep SAPPDiscordBot and the Halo community safe.

There aren’t any published security advisories