Security

The security team handle security vulnerabilities. It handles sensitive security-related issues reported to security@forgejo.org using encryption.

The security team also keeps the content of the security.txt file up to date.

The private GPG key for security@forgejo.org is shared among all members of the security team and not stored online.