Infraform
|
How do I handle security vulnerabilities in my project? |
Answered by
naheel0
Mar 28, 2026
Replies: 1 comment
|
Do NOT post vulnerabilities publicly. Create a security policy (.github/SECURITY.md) |
0 replies
Answer selected by
jaseel0
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Do NOT post vulnerabilities publicly.
Create a security policy (.github/SECURITY.md)
Establish private reporting (GitHub Security Advisory)
Fix the vulnerability in a private branch
Release a patch immediately
Publish advisory after patch is available