opsdash-app/SECURITY.md
blade34242 01552e2138
All checks were successful
Nextcloud Server Tests / matrix-config (push) Successful in 19s
Build And Publish Appstore Package / build_and_publish (push) Successful in 3m28s
Nextcloud Server Tests / Nextcloud stable31 / PHP 8.2 (stable31, 8.2) (push) Successful in 19m13s
Nextcloud Server Tests / version-consistency (push) Successful in 21s
Nextcloud Server Tests / Nextcloud stable31 / PHP 8.3 (stable31, 8.3) (push) Successful in 18m25s
Nextcloud Server Tests / Nextcloud stable34 / PHP 8.2 (stable34, 8.2) (push) Successful in 17m8s
Nextcloud Server Tests / Nextcloud stable34 / PHP 8.3 (stable34, 8.3) (push) Successful in 16m23s
Nextcloud Server Tests / Nextcloud stable35 / PHP 8.3 (stable35, 8.3) (push) Successful in 17m24s
Nextcloud Server Tests / Nextcloud stable35 / PHP 8.4 (stable35, 8.4) (push) Successful in 16m42s
Nextcloud Server Tests / Nextcloud stable35 / PHP 8.5 (stable35, 8.5) (push) Successful in 17m34s
Nextcloud Server Tests / Nextcloud stable32 / PHP 8.2 (stable32, 8.2) (push) Successful in 17m26s
Nextcloud Server Tests / Nextcloud stable32 / PHP 8.3 (stable32, 8.3) (push) Successful in 16m45s
Nextcloud Server Tests / Nextcloud stable33 / PHP 8.2 (stable33, 8.2) (push) Successful in 17m2s
Nextcloud Server Tests / Nextcloud stable33 / PHP 8.3 (stable33, 8.3) (push) Successful in 16m36s
Release 0.8.5 with Nextcloud 35 support
2026-10-22 11:00:00 +07:00

1.1 KiB

Security Policy

Project Note

Opsdash is built and maintained as a hobby project. I put real effort into security hardening, validation, and review, but this is still best-effort maintenance. If you spot something suspicious, please report it. Helpful reports make the app safer for everyone.

Supported Versions

We currently support the 0.8.x line (Nextcloud 31-35).

How to Report

  • Sensitive/security-critical issue: please use the private security contact below.
  • Non-sensitive security concern or hardening suggestion: opening a normal issue is welcome.
  • Alternate private contact: opsdash-security@gellert-innovation.dev (PGP optional).

Please include:

  • clear reproduction steps
  • expected vs actual behavior
  • Nextcloud version
  • Opsdash version
  • relevant logs/screenshots (with secrets removed)

Response Expectations

  1. Acknowledgement target: within 3 business days.
  2. Triage update target: usually within 7 days.
  3. Fix and release notes: tracked in CHANGELOG.md and the release notes workflow.

Please avoid public disclosure of exploitable vulnerabilities until a fix is available.