Security Policy

Security issues should be reported privately.

Report a Vulnerability

Please do not open a public issue or pull request for a security problem.

Send a private report that includes:

  • a short description of the issue

  • the affected role, app, or component

  • reproduction steps or a proof of concept

  • the expected impact or severity

  • any logs, screenshots, or traces that help explain the issue

  • your preferred contact method for follow-up

Security Contacts

For general help and non-security requests, see SUPPORT.md.

Repository Security Policies 🔐

The security policies enforced on this repository are documented here:

Detailed Secure Use Guides 🛡️

Detailed guides for secure use are documented here: