From 0ba1f794c1ef513ead254a4834d206a82a0ff3a4 Mon Sep 17 00:00:00 2001 From: ananducv Date: Sun, 15 Jun 2025 13:23:46 +0530 Subject: [PATCH 1/3] renamed env folder to bypass gitignore --- .../app/[locale]/dashboard/environments/page.tsx | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 packages/frontend-web/app/[locale]/dashboard/environments/page.tsx diff --git a/packages/frontend-web/app/[locale]/dashboard/environments/page.tsx b/packages/frontend-web/app/[locale]/dashboard/environments/page.tsx new file mode 100644 index 0000000..95e8272 --- /dev/null +++ b/packages/frontend-web/app/[locale]/dashboard/environments/page.tsx @@ -0,0 +1,16 @@ +"use client"; + +import { DashboardLayout } from "@/components/dashboard-layout"; +import { EnvContentWrapper } from "@/components/env-content-wrapper"; +import { use } from "react"; + +export default function EnvPage({ params }: { params: Promise<{ locale: string }> }) { + // Properly unwrap the params Promise using React.use + const { locale } = use(params); + + return ( + + + + ); +} \ No newline at end of file From 6e700acd02dfc52909abb437c42069453d937310 Mon Sep 17 00:00:00 2001 From: ananducv Date: Sun, 15 Jun 2025 14:59:12 +0530 Subject: [PATCH 2/3] navigation for env in sidebar updated --- packages/frontend-web/components/project-dialog.tsx | 2 +- packages/frontend-web/components/sidebar-nav.tsx | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/packages/frontend-web/components/project-dialog.tsx b/packages/frontend-web/components/project-dialog.tsx index 970aa52..cbf3ba8 100644 --- a/packages/frontend-web/components/project-dialog.tsx +++ b/packages/frontend-web/components/project-dialog.tsx @@ -251,7 +251,7 @@ const featureMenuItems: { { key: "env", labelKey: "env", - path: "/dashboard/env", + path: "/dashboard/environments", icon: ( Date: Fri, 20 Jun 2025 16:28:09 +0530 Subject: [PATCH 3/3] Create SECURITY.md --- SECURITY.md | 79 +++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 79 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..22c6724 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,79 @@ +# Security Policy + +## πŸ“Œ Project: Zecrypt Labs + +Zecrypt Lab is a zero-knowledge, end-to-end encrypted password manager designed with privacy and user data security as its top priorities. We take security issues seriously and appreciate responsible disclosures that help us improve the application for everyone. + +--- + +## πŸ” Supported Versions + +We actively maintain and patch security issues in the following versions: + +| Version | Supported | +|---------|-----------| +| Latest | βœ… | + + +If you're not using the latest version, we recommend upgrading as soon as possible. + +--- + +## πŸ“£ Reporting a Vulnerability + +If you discover a security vulnerability in Secrets Lab, please **do not create a public GitHub issue**. Instead, report it privately to ensure the safety of our users: + +- **Email**: `contact@zecrypt.io` + +When reporting a vulnerability, please include: + +- A clear and concise description of the issue. +- Steps to reproduce (if possible). +- Any potential impact or exploitation scenarios. +- Suggestions for a fix (if applicable). + +We aim to respond to security reports **within 72 hours** and provide updates as we work toward a resolution. + +--- + +## πŸ”„ Vulnerability Handling Process + +1. **Initial Acknowledgement** (within 48 hours). +2. **Verification & Impact Analysis**. +3. **Patch Development** and coordinated disclosure. +4. **Security Advisory Release** via GitHub and official channels. + +--- + +## πŸ›‘οΈ Security Features + +Secrets Lab is designed with security at its core: + +- **Zero-Knowledge Architecture**: We do not have access to your passwords or encryption keys. +- **End-to-End Encryption**: All data is encrypted client-side before being sent to the server. +- **No Raw Data Storage**: We never log or store unencrypted secrets. +- **Automatic Logout & Session Expiry** +- **Rate Limiting & Brute-force Protection** + +--- + +## πŸ§ͺ Responsible Disclosure Rewards + +We’re currently not offering monetary bounties, but all valid disclosures will be publicly credited (if desired) in our **Security Hall of Fame**. + +--- + +## πŸ™Œ Acknowledgments + +We thank all security researchers and ethical hackers who help improve Secrets Lab. Your contributions help us build a safer digital future. + +--- + +## πŸ“„ License + +This project is open-source and available under the [custom license](./LICENSE), restricting commercial use. Please respect its terms when contributing or reusing. + +--- + +Stay safe, +**The Zecrypt Labs Team**