2 Commits

Author SHA1 Message Date
Estrella Pan
8600bb7cf7 docs(security): add working disclosure contact email
GitHub private vulnerability reporting is now enabled on the repo, and the
email fallback previously pointed at a non-public profile email. Point it at
a concrete address so both documented disclosure channels actually work
(raised by a reporter in #1041).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014w1Z6Nxy6XTRgkFXqPr9Zh
2026-07-02 13:49:23 +02:00
Estrella Pan
506d1d3f28 docs: add SECURITY.md for vulnerability reporting
Add security policy with bilingual instructions (English/Chinese) for
reporting vulnerabilities via GitHub Private Vulnerability Reporting
or email contact.

Closes #879

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>
2026-01-26 23:23:35 +01:00