Public release release-f8ee5fc25a1d

Source commit: f8ee5fc25a1d0fed1e59b3f34d534b395bf34dad

Public tree identity: sha256:a428db3c520f7c0779135e36a841a5102ed26070519b696a146dbfa54514bd52
This commit is contained in:
Clusterflux release 2026-07-19 15:51:02 +02:00
commit 94d1716637
221 changed files with 81104 additions and 0 deletions

18
SECURITY.md Normal file
View file

@ -0,0 +1,18 @@
# Security reporting
## Supported versions
Security fixes are applied to the current main branch and the most recent
published Clusterflux release. Older preview releases are not maintained.
## Report a vulnerability
Email security@michelpaulissen.com with a concise description, affected version
or source revision, reproduction steps, and impact. Do not open a public issue
for an unpatched vulnerability or include credentials, session tokens, private
keys, provider tokens, customer data, or operator secrets in a public report.
You should receive an acknowledgement within three business days. We will
coordinate validation, remediation, release timing, and disclosure with you.
Avoid accessing data that is not yours, disrupting the hosted service, or
retaining sensitive data beyond what is necessary to demonstrate the issue.