SECURITY.md

To report a security issue, please use the "Report a vulnerability" button onGitHub's Security tab forjj's main repo, underAdvisories.

Our vulnerability management team will respond within 3 working days of yourreport. If the issue is confirmed as a vulnerability, we will open a SecurityAdvisory. This project follows a 90 day disclosure timeline.

Feel free to email Jujutsu VCS Security atjj-security@googlegroups.com if youhave questions.