# Pikapod — how to report a security problem (RFC 9116).
#
# Test against your own instance and your own account. Stop as soon as you have
# proved a thing is possible. Good-faith research within the published scope is
# authorised by the policy below, and we will not take legal action over it.
#
# The Expires date below is a literal, renewed by hand, because the field is
# there to say this file is still maintained. A build check fails while there is
# still time to renew it.

Contact: mailto:support@forgejo.dc-analytic.com
Expires: 2027-08-12T00:00:00.000Z
Preferred-Languages: en
Canonical: https://portal.ksonschema.org/.well-known/security.txt
Policy: https://portal.ksonschema.org/legal/security/

# Forgejo itself is out of scope here: report bugs in the forge software to the
# Forgejo project at https://forgejo.org/security/. How we run it is ours.