Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
Mirrored from https://github.com/Slazee/caddy.git
Synced Nov 11, 17:15 UTC
Update LLM disclosure requirements in SECURITY.md
Clarified disclosure requirements for LLMs in security reports.
Matt Holt committed
Feb 9, 2026 at 14:40 UTC
5ff50779ccf1d5698bba48d140b713cff1a09390
1 file changed
+1
-1
.github/SECURITY.md
+1
-1
@@ -33,7 +33,7 @@ We get a lot of difficult reports that turn out to be invalid. Clear, obvious re
33
34
First please ensure your report falls within the accepted scope of security bugs (above).
35
36
-**YOU MUST DISCLOSE THE USE OF LLMs ("AI"), WHETHER FOR DISCOVERING SECURITY BUGS OR WRITING THE REPORT.** Even if you are using AI as part of writing the report or its replies, we require you to mention the extent of it.
36
+**YOU MUST DISCLOSE THE USE OF LLMs ("AI") INVOLVED IN ANY WAY.** Whether you are using AI for discovery, as part of writing the report or its replies, and/or testing or validating proofs and changes, we require you to mention the extent of it. **FAILURE TO INCLUDE A DISCLOSURE MAY LEAD TO IMMEDIATE DISMISSAL OF YOUR REPORT.**
37
38
We'll need enough information to verify the bug and make a patch. To speed things up, please include:
39