# Security Policy

Security issues should be reported privately.

## Report a Vulnerability

Please do not open a public issue or pull request for a security problem.

Send a private report that includes:

- a short description of the issue
- the affected role, app, or component
- reproduction steps or a proof of concept
- the expected impact or severity
- any logs, screenshots, or traces that help explain the issue
- your preferred contact method for follow-up

## Security Contacts

- Matrix: @kevinveenbirkenbach:infinito.nexus
- Email: [kevinveenbirkenbach@infinito.nexus](mailto:kevinveenbirkenbach@infinito.nexus)
- Phone: [+49 178 179 8023](tel:+491781798023)

For general help and non-security requests, see [SUPPORT.md](SUPPORT.md).

## Repository Security Policies 🔐

The security policies enforced on this repository are documented here:

- [Branch Protection](docs/contributing/tools/github/branch/security.md): Rules enforced on the `main` branch.
- [Repository Settings](docs/contributing/tools/github/repository.md): Repository-wide security configuration.

## Detailed Secure Use Guides 🛡️

Detailed guides for secure use are documented here:

- [User Security Guide](docs/security/user.md)
- [Administrator Security Guide](docs/security/administrator.md)