Skip to content

SECURITY.md

Latest commit

 

History

History
26 lines (17 loc) · 590 Bytes

SECURITY.md

File metadata and controls

26 lines (17 loc) · 590 Bytes
Raw

Security Policy

Supported Versions

Version Supported
0.1.x Yes

Reporting a Vulnerability

Please report security issues privately by opening a GitHub Security Advisory on this repository, or by contacting the maintainers through GitHub.

Do not disclose critical vulnerabilities in public issues before a fix is available.

Scope

  • Issuer private key handling
  • Credential issuance and verification
  • Canonical JSON signing

Out of Scope (v0.1)

  • Production HSM integration
  • Third-party issuer trust policies
  • Revocation infrastructure at scale