summaryrefslogtreecommitdiffhomepage
path: root/SECURITY.md
blob: a968438951a875e4698e1702e86a2fb5d91447d7 (plain)
1
2
3
4
5
6
7
8
9
10
# Security and Vulnerability Reporting

Sensitive security-related questions, comments, and reports should be sent to
the [gvisor-security mailing list][gvisor-security-list]. You should receive a
prompt response, typically within 48 hours.

Policies for security list access, vulnerability embargo, and vulnerability
disclosure are outlined in the [governance policy](GOVERNANCE.md).

[gvisor-security-list]: https://groups.google.com/forum/#!forum/gvisor-security