Skip to content

Security: daniel-kindl/dkkb

SECURITY.md

Security policy

DKKB is a static knowledge site. It does not process user accounts, secrets, payments, or application data.

Security reports are still useful for dependencies, build scripts, and GitHub Actions workflows.

Do not publish sensitive exploit details in a public issue. Use GitHub private vulnerability reporting when it is available for this repository. If that option is not available, contact the maintainer privately through the contact information on the maintainer's GitHub profile.

For normal dependency updates or non-sensitive hardening changes, use a public issue or pull request.

There aren't any published security advisories