# Security policy

Please report vulnerabilities privately to the repository maintainers through GitHub's
private vulnerability reporting feature. Do not open a public issue for an unpatched
vulnerability. Scope includes the server, authentication, encrypted settings, Computer
providers, container images, and deployment configuration. We aim to acknowledge reports
within five business days and provide a remediation plan within thirty days.