Skip to content

Security: sindurigf/github-discourse-sync

SECURITY.md

Security

Report a Vulnerability

Report a vulnerability privately through GitHub's private vulnerability reporting on this repository. Do not open a public issue for it.

Report a vulnerability

Include the workflow or function, the input that shows the problem and what happens.

Scope

  • The workflows in .github/workflows
  • scripts/discourse-sync.mjs
  • The defusing of copied text between GitHub and the forum

Copied text is defused only for the forms the README lists. A form that is not listed and still notifies someone, links an issue or marks a post as copied is in scope.

Limits and Privacy

There aren't any published security advisories