acm-austin-website/SECURITY.md

Security Policy

Reporting a Vulnerability

Please do not open a public GitHub issue for a security vulnerability. Report it privately to the ACM Austin maintainers through the repository's GitHub security contact or the chapter organizers' official contact channel.

Include:

• A short description of the issue and its impact.
• Reproduction steps or a minimal proof of concept.
• Affected URL, file, or integration.
• Any suggested mitigation.

Allow maintainers reasonable time to investigate before public disclosure. Never include API keys, access tokens, passwords, private attendee data, or other secrets in an issue, pull request, screenshot, or log.

Scope

This policy covers the website, its documentation, static assets, and future server-side integrations for Meetup, Luma, Sessionize, and Certifier.