Skip to content

Security: kubevela/kubevela

SECURITY.md

Security Policy

Reporting a Vulnerability

If you've found a security issue that you'd like to disclose confidentially please send email to security@mail.kubevela.io .

Who Reads Email Sent to security@mail.kubevela.io?

Only a restricted and carefully chosen group of KubeVela maintainers will have access to material sent to the security@mail.kubevela.io address. No outside users can subscribe to this list.

Please provide as much information about your system and the issue as possible when contacting the list.

How We Respond

Email sent to security@mail.kubevela.io is read and acknowledged with a non-automated response within three working days. For issues that are complicated and require significant attention, we will open an investigation and will provide you with a mechanism to check the status of our progress at any time.

Learn more about advisories related to kubevela/kubevela in the GitHub Advisory Database