kubevela/SECURITY.md

Security Policy

Reporting a Vulnerability

If you've found a security issue that you'd like to disclose confidentially please send email to security@mail.kubevela.io .

Who Reads Email Sent to security@mail.kubevela.io?

Only a restricted and carefully chosen group of KubeVela maintainers will have access to material sent to the security@mail.kubevela.io address. No outside users can subscribe to this list.

What to Send to security@mail.kubevela.io

Please provide as much information about your system and the issue as possible when contacting the list.

How We Respond

Email sent to security@mail.kubevela.io is read and acknowledged with a non-automated response within three working days. For issues that are complicated and require significant attention, we will open an investigation and will provide you with a mechanism to check the status of our progress at any time.