Skip to content

Repository navigation

Security: SourceWard/sourceward

Security

Report a vulnerability

SECURITY.md

Security Policy

Reporting a vulnerability

Do not report undisclosed vulnerabilities through a public GitHub issue.

Use GitHub private vulnerability reporting for the SourceWard repository. Include:

  • The affected version or commit.
  • Reproduction steps or a proof of concept.
  • The expected security impact.
  • Any suggested remediation.

We will acknowledge a report as soon as practical, investigate it, and coordinate disclosure with the reporter.

Scope

Reports about SourceWard itself are in scope. Findings produced by SourceWard for unrelated third-party projects should be reported to those projects through their preferred security channels.

SourceWard findings are review signals, not declarations that a project or maintainer is malicious.

There aren't any published security advisories