# Security Policy

Thank you for helping us keep this action and the systems they interact with secure.

## Reporting Security Issues

This repository is maintained by [Anthropic](https://www.anthropic.com/).

The security of our systems and user data is Anthropic’s top priority. We appreciate the work of security researchers acting in good faith in identifying and reporting potential vulnerabilities.

Our security program is managed on HackerOne and we ask that any validated vulnerability in this functionality be reported through their [submission form](https://hackerone.com/4f1f16ba-10d3-4d09-9ecc-c721aad90f24/embedded_submissions/new).

## Anthropic Bug Bounty

Our Bug Bounty Program Guidelines are defined on our [HackerOne program page](https://hackerone.com/anthropic).
