Skip to content

Security: xbadc0ffe/pull-state

Security

SECURITY.md

Security Policy

Supported versions

Only the current App Store release is supported.

Scope

Pull State is a local-only iOS app. It has no backend, no accounts, no network communication, and no analytics. All user data remains on device in the app sandbox.

Reporting a vulnerability

If you discover a security issue in the app or this repository, please open a GitHub issue describing the problem. For sensitive findings, contact the maintainer privately via GitHub rather than disclosing publicly.

There is no bug bounty programme.

Out of scope

Issues that require physical access to an unlocked device, or that depend on a jailbroken device, are out of scope.

There aren't any published security advisories