Get in touch
Write to us about the application, the project or the problem you have in mind. One person reads everything that comes in.
Best for anything that needs a record. Security reports, scoping, work enquiries.
Good once something's already in motion.
Reporting a vulnerability
Email, coordinated disclosure. Gelhaus Solutions is the applicant behind the CNA that covers this work, and reports against anything in the GHub line go through the same process as any other: an acknowledgement, a scored assessment, and a timeline agreed with you.
The scope statement and the disclosure policy are published on the security policy page.
Anything else
Licensing, hosting, a question about whether one of these fits what you are doing: email is fine, and so is Discord.
Send a message
Pick what it is about, and it reaches the person who can answer it.
Use the channels on the security page. They are faster than a form.
Use the disclosure policy instead →