---
url: /docs/security.md
description: >-
  How to report Task security vulnerabilities and how the project responds to
  them
---

# Security

The Task team takes security seriously and we thank our community for disclosing
issues responsibly. To report security issues, please use [GitHub's built-in
Private Vulnerability Reporting][pvr] or send an email to
<task@taskfile.dev>. Please include as much detail as
possible in your report.

A member of the team will investigate as soon as possible and we will keep you
updated throughout the process.

You can read more about how we handle security-related issues in our [Incident
Response Plan][irp] and [Threat Model][tm].

[pvr]: https://github.com/go-task/task/security/advisories/new

[irp]: /docs/security/incident-response-plan.md

[tm]: /docs/security/threat-model.md