Security

Report a vulnerability

SECURITY.md

Security Policy

Report vulnerabilities privately via GitHub Security Advisories.

Scope

Certification artifact signing key handling
Partner identity / certificate verification
Test battery measurements (a vulnerable battery could falsely certify a non-conforming product)

There aren't any published security advisories