Add SECURITY.md (#23)

2026-05-06 08:56:48 -04:00 · 2025-05-05 15:18:41 +02:00
parent 750b3a33f8
commit e8c1712d60
1 changed files with 15 additions and 0 deletions
@@ -0,0 +1,15 @@
+# Security policy
+
+## Reporting a vulnerability
+
+If you have found a possible vulnerability, please email `security at astral dot sh`.
+
+## Bug bounties
+
+While we sincerely appreciate and encourage reports of suspected security problems, please note that
+Astral does not currently run any bug bounty programs.
+
+## Vulnerability disclosures
+
+Critical vulnerabilities will be disclosed via GitHub's
+[security advisory](https://github.com/astral-sh/ty/security) system.