SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability:

1. Do not open a public issue
2. Email: jeder@redhat.com
3. Include: description, steps to reproduce, potential impact

Response: Initial acknowledgment within 48 hours.