# Security policy

Read the [security and privacy policy](../docs/security/SECURITY.md). Do not put credentials or raw reports in public Issues. Use private vulnerability reporting if enabled; otherwise request a private contact first.