## Security guideline
Before commit to our repository please scan code on security vulnerabilities via [bandit tool](https://github.com/PyCQA/bandit).
Run [snyk scan](https://github.com/snyk/snyk) on code and on a docker image if you do changes in dockerfile.
Before target using a docker container, please update third-party packages to get the last security fixes.
It needs because an docker image has 3d party snapshot on the time that it was built.
When you will use a docker container based on the image, several new security vulnerabilities may be already fixed and need just update these 3d party packages.
```cmd
# for Ubuntu
apt update && apt upgrade -y --no-install-recommends && rm -rf /var/lib/apt/lists/*
# for RHEL
yum -y update-minimal --security --setopt=tsflags=nodocs && yum clean all
```
We recommend to use the latest version of PyPi packages installer to resolve dependency issues as well.
```cmd
python -m pip install --upgrade pip
```
As well we recommend to use the official Intel® Distribution of OpenVINO™ toolkit packages from trusted resources.
See more on the [product page](https://software.intel.com/content/www/us/en/develop/tools/openvino-toolkit/choose-download.html).
## Report a Vulnerability
Please report security issues or vulnerabilities to the [Intel® Security Center](https://www.intel.com/security).
For more information on how Intel® works to resolve security issues, see
[Vulnerability Handling Guidelines](https://www.intel.com/content/www/us/en/security-center/vulnerability-handling-guidelines.html).