CERBERUS/caddy
1
0
Fork 0
mirror of https://github.com/caddyserver/caddy.git synced 2026-08-04 06:53:36 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Require disclosure of LLM usage in security reports

Browse source 
Added requirement to disclose the use of LLMs in security reports.
This commit is contained in:
Matt Holt 2026-02-05 06:12:26 -07:00 • committed by GitHub
parent e0f8d9b204
commit 40927d2f75
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
.github/SECURITY.md vendored
View file

@ -33,6 +33,8 @@ We get a lot of difficult reports that turn out to be invalid. Clear, obvious re
First please ensure your report falls within the accepted scope of security bugs (above).
**YOU MUST DISCLOSE THE USE OF LLMs ("AI"), WHETHER FOR DISCOVERING SECURITY BUGS OR WRITING THE REPORT.** Even if you are using AI as part of writing the report or its replies, we require you to mention the extent of it.
We'll need enough information to verify the bug and make a patch. To speed things up, please include:
- Most minimal possible config (without redactions!)