Skip to content

docs: add security reporting policy - #1

Merged
nomyr-ai merged 1 commit into
mainfrom
docs/security-reporting
Sep 19, 2026
Merged

nomyr-ai merged 1 commit into
mainfrom
docs/security-reporting

Conversation

@nomyr-ai

Copy link
Copy Markdown
Contributor

Problem and result

GitHub ignores mailto: contact links in the issue template picker, so the private security reporting route was not visible. This adds a repository security policy and links the issue picker to that policy.

Changes

  • add private vulnerability reporting guidance
  • route security reports to oss@nomyr.io
  • link product vulnerabilities to the main Nomyr security policy

Validation

  • YAML parsed successfully
  • git diff --check
  • issue template picker will be verified after merge

Signed-off-by: Nomyr AI <oss@nomyr.io>
@nomyr-ai
nomyr-ai merged commit bf9a0ed into main Sep 19, 2026
2 checks passed
@nomyr-ai
nomyr-ai deleted the docs/security-reporting branch September 19, 2026 09:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant