Intel is committed to rapidly addressing security vulnerabilities affecting our customers and providing clear guidance on the solution, impact, severity, and mitigation.

To ensure our codebase remains secure, we leverage GitHub Actions for continuous security scanning with the following tools:

• Bandit: Automatically scans our Python code for common security issues, helping us identify and mitigate potential vulnerabilities proactively.
• Trivy: Integrated into our CI/CD pipeline via GitHub Actions, Trivy scans our project's dependencies and container images for known vulnerabilities, ensuring our external components are secure.

These integrations ensure that every commit and pull request is automatically checked for security issues, allowing us to maintain a high security standard across our development lifecycle.

In addition to our integrated tools, we utilize Checkmarx for static application security testing (SAST). This comprehensive analysis tool is run externally to scrutinize our source code for security vulnerabilities, complementing our internal security measures with its advanced detection capabilities.

Please report any security vulnerabilities in this project utilizing the guidelines here.

Users interested in keeping up-to-date with security announcements and updates can:

• Follow the GitHub repository 🌐
• Check the Releases section of our GitHub project 📦

We encourage users to report security issues and contribute to the security of our project 🛡️. Contributions can be made in the form of code reviews, pull requests, and constructive feedback. Refer to our CONTRIBUTING.md for more details.

NOTE: This security policy is subject to change 🔁. Users are encouraged to check this document periodically for updates.