Please do NOT open public GitHub issues for security vulnerabilities.
To report a security issue, follow the Red Hat security reporting process:
- Email: secalert@redhat.com
- Details: https://access.redhat.com/security/team/contact
Alternatively, use GitHub's private vulnerability reporting on this repository ("Report a vulnerability" under the Security tab) if it is enabled for your account.
Please include:
- The affected component and commit or release tag
- A description of the issue and its impact
- Reproduction steps or a proof of concept where possible
This policy covers the traust-engine deterministic processing library.
Only the current main branch receives security fixes.