Skip to content

Revise security policy and reporting instructions #357

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
willingc merged 1 commit into from
Apr 18, 2026
Merged

Revise security policy and reporting instructions #357

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 18 additions & 0 deletions SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
# Reporting Vulnerabilities

**⚠️ Please do not file public GitHub issues for security
vulnerabilities as they are open for everyone to see! ⚠️**

We encourage responsible disclosure practices for security
vulnerabilities.


## Reporting a Vulnerability

If you believe you've found a security-related bug, fill out a new
vulnerability report via GitHub directly. To do so, follow these instructions:
1. Click on the `Security` tab in the project repository.
2. Click the green `Report a vulnerability` button at the top right corner.
3. Fill in the form as accurately as you can, including as many details as
possible.
4. Click the green `Submit report` button at the bottom.
Loading