# Security Policy

## Reporting a vulnerability

Report security vulnerabilities **privately** via GitHub's private vulnerability
reporting: the repository's **Security** tab -> **Report a vulnerability**
(<https://github.com/mmarmol/durin/security/advisories/new>). Please do **not** open a
public issue for security reports.

We aim to acknowledge reports within a few days and will coordinate disclosure once a
fix is available.

## Supported versions

durin is pre-1.0. Security fixes target the latest release of `durin-agent` on PyPI.
