The my-pi project takes security seriously. If you discover a vulnerability or security flaw, please do NOT open a public issue.

Instead, please report security issues privately via GitHub Security Advisories or by contacting the maintainers directly at: security@boxboxmari.com (or project maintainers on GitHub).

Please include:

• A detailed description of the vulnerability.
• Steps to reproduce or proof-of-concept script.
• Potential impact and suggested mitigation if known.

Maintainers will acknowledge receipt within 48 hours and provide updates on resolution timeline.

Beta branch-protection and release-security requirements are documented in docs/GITHUB_GOVERNANCE.md. These settings must be verified in GitHub; the repository cannot enforce them from source alone.