SECURITY.md

Rama main · réplica de lectura del repositorio original.

# Security Policy

Thank you for helping keep FeatBit and its users secure.

## Reporting a Vulnerability

Please report suspected security vulnerabilities privately through
[GitHub's Report a vulnerability feature](https://github.com/featbit/featbit/security/advisories/new).

Do not disclose vulnerability details, proof-of-concept code, or links to
public vulnerability reports in public issues, discussions, or pull requests.

Please include:

- The affected version, commit, or container image tag.
- A description of the vulnerability and its potential impact.
- Reproduction steps or a proof of concept.
- Any relevant deployment configuration, with credentials and personal
  information removed.

If you are unsure whether an issue is security-related, please use the
private reporting channel so we can assess it together.

## Coordinated Disclosure

We will review your report and use the private advisory to discuss our
findings, request additional information, and coordinate any necessary fix.

Please keep the report and related technical details private until we have
coordinated disclosure and users have access to a fix or mitigation.

When publishing a security advisory, we will credit your contribution
unless you prefer to remain anonymous.

## Other Issues

For non-security bugs and feature requests, please use
[GitHub Issues](https://github.com/featbit/featbit/issues).