[Security] Question Regarding Responsible Security Disclosure Process

[ttzero25]

Hello Autoware Team,

I am a security researcher based in South Korea.

I recently identified a potential security vulnerability affecting Autoware and would like to disclose it responsibly. However, I could not find a dedicated security reporting email address, SECURITY.md policy, or a GitHub Security Advisory (GHSA) reporting channel for this repository.

Could you please let me know the appropriate channel for submitting a private security report?

I would prefer to share the technical details, proof of concept, and impact analysis through a non-public disclosure process.

Thank you for your time and assistance. I look forward to your guidance on how to proceed.