Security Policy

Reporting a Vulnerability

Please do not open a public GitHub issue for security vulnerabilities.

Report security vulnerabilities by email to:

security@trigger.fish

For full details on scope, response timelines, and safe harbor, see our Responsible Disclosure Policy.

Our PGP key for security@trigger.fish is published at https://trigger.fish/.well-known/security.txt and on major keyservers.