docs: reconcile security reporting guidance

This commit is contained in:
Alexandre Teixeira
2026-07-28 20:26:38 +01:00
parent d190980f47
commit 6bc6ee9c7e
+3 -1
View File
@@ -37,4 +37,6 @@ Only `.env.example`, docs, source, tests, and static assets should be committed.
## Reporting
Please report vulnerabilities privately via GitHub security advisories if available, or by opening a minimal issue that does not disclose exploit details.
Report security vulnerabilities privately through [GitHub Security Advisories](https://github.com/odysseus-dev/odysseus/security/advisories/new).
Do not open a public issue or discussion, and do not disclose exploit details publicly.