Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
Mirrored from https://github.com/Slazee/caddy.git
Synced Nov 11, 17:15 UTC
Require disclosure of LLM usage in security reports
Added requirement to disclose the use of LLMs in security reports.
Matt Holt committed
Feb 5, 2026 at 06:12 UTC
40927d2f75bd928f99155653b90a2762919a3f1c
1 file changed
+2
.github/SECURITY.md
+2
@@ -33,6 +33,8 @@ We get a lot of difficult reports that turn out to be invalid. Clear, obvious re
33
34
First please ensure your report falls within the accepted scope of security bugs (above).
35
36
+**YOU MUST DISCLOSE THE USE OF LLMs ("AI"), WHETHER FOR DISCOVERING SECURITY BUGS OR WRITING THE REPORT.** Even if you are using AI as part of writing the report or its replies, we require you to mention the extent of it.
37
+
38
We'll need enough information to verify the bug and make a patch. To speed things up, please include:
39
40
- Most minimal possible config (without redactions!)