diff --git a/SECURITY.md b/SECURITY.md index f487e04e..ffe0d5e5 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,9 +2,15 @@ ## Supported Versions -This product currently has no support and is experimental. That could change in future. - +This product currently has no support and is experimental. That could change in the future. ## Reporting a Vulnerability -Please report any issues or vulerabilities with an [issue](https://github.com/bcgov/pubcode/issues). +**DO NOT open public GitHub issues for security vulnerabilities.** + +If you believe you have found a security vulnerability in this project, please report it privately: + +1. Navigate to the main page of this repository on GitHub. +2. Click the **"Security"** tab at the top of the repository (next to "Insights"). +3. In the left sidebar under "Reporting", click **"Advisories"**. +4. Click the **"Report a vulnerability"** button to privately submit a report to the repository maintainers.