# Security Policy

## Reporting a Vulnerability

Please report security issues via GitHub Security Advisories:

https://github.com/frak-id/atelier/security/advisories/new

If you cannot use GitHub advisories, open a private discussion with the
maintainers and note that it is a security report.

We aim to acknowledge reports within 7 days.

## Scope

- Manager API and services
- CLI and install scripts
- Dashboard
- Sandbox agent

## Non-security issues

For general bugs or feature requests, use GitHub Issues.
