Commit Graph

3 Commits

Author SHA1 Message Date
Ramon Roche
882aaea5dc docs(security): treat AI-assisted bug discovery as public
Align with the Linux kernel security process: bugs found with AI
assistance systematically surface across multiple researchers at the
same time, so treat them as public and fix them in the open instead of
through a private advisory. Reproducers stay private and are shared
with maintainers on request.

Reference: https://docs.kernel.org/process/security-bugs.html

Assisted-by: Claude:claude-fable-5
Signed-off-by: Ramon Roche <mrpollo@gmail.com>
2026-07-23 09:44:34 -07:00
Ramon Roche
3f0ddf9793 docs(security): update policy for OpenSSF badge
Update supported versions to 1.16.x, add response process with
7-day acknowledgment timeline, reporter credit policy, and secure
development practices section.

Signed-off-by: Ramon Roche <mrpollo@gmail.com>
2026-03-12 13:15:45 -07:00
Ramon Roche
a29b07fa73 Security Vulnerability Reporting 2023-11-06 09:32:16 +01:00