Skip to content

SECURITY.md

Latest commit

 

History

History
13 lines (7 loc) · 900 Bytes

SECURITY.md

File metadata and controls

13 lines (7 loc) · 900 Bytes

Security Policy

Reporting a Vulnerability

Do not open a public issue.

Report privately via GitHub Security Advisories or email security@offsechq.com. Include a description, reproduction steps, and impact. Expect an initial response within 72 hours.

For vulnerabilities in the upstream Harden-Windows-Security code, report to the upstream repository directly.

Verifying Releases

All packages are built from source via GitHub Actions with full build logs. MSIX bundles are signed with the certificate included in each installation kit. You can reproduce any release by cloning the repository and running the build scripts.