SurfSense/SECURITY.md
CREDO23 48a97bea68 docs: make first contributions match one tree, not the old hosted stack
Replace the Docker-first contributing guide with a short index, current Covenant 3.0, private security reports, and issue forms that name the four products.
2026-09-18 08:52:14 +02:00

487 B

Security

Do not file public issues for vulnerabilities.

Report them with GitHub private vulnerability reporting. If that is unavailable, email rohan@surfsense.com (same address as CODE_OF_CONDUCT.md).

Include the tree (surfsense_local, surfsense_backend, surfsense_web, surfsense_mcp), a reproduction, and impact.

We will acknowledge the report and fix before any public disclosure.