Skip to content

Latest commit

 

History

History
13 lines (8 loc) · 1.05 KB

SECURITY.md

File metadata and controls

13 lines (8 loc) · 1.05 KB

Security Policy

Supported Versions

Version Supported
Any Version

Reporting a Vulnerability

For most issues, GitHub's beta private vulnerability reporting tools are good enough to explain most issues. Then many other people can potentially help as well, including the entirety of the official development team plus related code owners. For extreme issues, emailing security@khrysystem.dev works too, but please use good judgement on if it is really necessary to email. instead of a private report.

In order to give proper information when reporting a vulnerability, ensure that general information, like OS, Vulkan version, a minimal reproducible example (if applicable), and other associated information should be mentioned clearly whichever way is chosen, plus a brief description as to why it is a security hole (something beyond "It causes errors" please, because that is NOT a vulnerability, that is an issue, and should go into GitHub Issues).