Watchtower-Course-Project

Security Policy

Project Status

WatchTower is a course prototype created for CSE 110. The project is actively developed by the team during the quarter and is not intended for production use at this stage.

Reporting a Vulnerability

If you find a security issue in WatchTower, please report it to the project team through the team’s course communication channel or by contacting one of the team leads directly.

Please avoid publicly disclosing security issues until the team has reviewed the report and decided on the appropriate fix.

What to Include

When reporting a vulnerability, please include:

• A short description of the issue
• Steps to reproduce the issue, if possible
• The affected file, feature, or workflow
• Any screenshots, logs, or examples that help explain the problem

Supported Versions

Version	Supported
Current course prototype	Yes

Security Practices

The team uses the following practices to support project quality and security:

• GitHub Issues and Pull Requests for tracked changes
• Code review before merging major changes
• HTML, CSS, and JavaScript validation through CI
• Unit and end-to-end testing through CI
• JSDoc documentation generation
• Dependabot alerts and dependency update PRs
• Dependency security audit through CI
• CodeQL/code scanning where enabled

Notes

This project is a learning-focused prototype. Security reports will be reviewed during active development and addressed based on project scope, severity, and course timeline.