mirror of
https://github.com/hanzoai/calendar.git
synced 2026-09-24 22:42:24 +00:00
zeekay
c816524d41
Adds .hanzo/workflows/cicd.yml calling the canonical pipeline and drops the GitHub-hosted workflows it replaces. Lands here because this is where the repo is written — git.hanzo.ai is upstream and github.com is its push mirror, so the same change made on github.com never reaches the runner fleet.
550 B
550 B
Security Policy
Reporting a vulnerability
Email [email protected] with details. We respond within 48 hours; critical issues receive same-day acknowledgment.
Report to us, not to the upstream this fork came from. They cannot fix what we ship, and routing a live vulnerability in our deployment to a third party tells someone else about it before it reaches the people who can close it.
Scope
This policy covers the code in this repository. For the broader Hanzo platform threat model, see hanzoai/hips.