pikopod is pre-v1. Security fixes land on the latest release only.

Please report security vulnerabilities privately through GitHub Security Advisories.

Do not open a public issue for a security vulnerability.

Include as much as you can:

• A description of the issue and its impact
• Steps to reproduce, or a proof of concept
• The pikopod version (pikopod --version) or commit SHA
• Your platform and Go version if you built from source

You can expect an acknowledgement within three business days and an assessment within ten. We will keep you updated as we work on a fix, and we will credit you in the advisory unless you prefer to stay anonymous.