Skip to content

Security: ovh/ovhcloud-cli

SECURITY.md

Security Policy

Supported versions

Only the latest release of ovhcloud-cli receives security fixes. Please upgrade to the latest release before reporting an issue.

Version Supported
latest release yes
older releases no

Reporting a vulnerability

Please do not report security vulnerabilities through public GitHub issues, discussions or pull requests.

Report them privately through GitHub: Report a vulnerability.

Please include:

  • the ovhcloud-cli version (ovhcloud version) and how it was installed (binary, Docker image, go install)
  • the affected component (executor, assertion, test suite parsing, ...)
  • steps to reproduce, ideally a minimal test suite file
  • the impact you observed or expect

What to expect

  • We acknowledge your report.
  • We keep you informed of the progress towards a fix.
  • Once a fix is released, we publish a GitHub security advisory and credit you, unless you prefer to stay anonymous.

Scope

In scope: the ovhcloud-cli code in this repository and the release artifacts published on GitHub and Docker Hub (ovhcom/ovhcloud-cli).

Learn more about advisories related to ovh/ovhcloud-cli in the GitHub Advisory Database