Security Policy¶
Reporting a Vulnerability¶
If you discover a security issue, please report it responsibly.
Do NOT create a public issue for security vulnerabilities. Instead:
- Email: Contact magnusknutas@botwork.se directly
- Gitea: Report via code.botwork.se/Botwork/prove
We aim to respond within 48 hours and provide a timeline for the fix.
Scope¶
- Prove compiler vulnerabilities
- Runtime security issues
- Standard library security flaws
Out of Scope¶
- Social engineering
- Physical security
- Denial of service (unless trivially exploitable)
Security.txt¶
For automated security contact discovery, see .well-known/security.txt.