cassandra/SECURITY.md

16 lines
675 B
Markdown

# Security Policy
## Reporting a Vulnerability
Please report suspected security vulnerabilities in Apache Cassandra
privately to the Apache Security Team at <security@apache.org>, following the
ASF process at <https://www.apache.org/security/>. Do not open public GitHub
issues or pull requests for security reports.
## Security Model
Apache Cassandra's security model - what is in and out of scope, the trust
boundaries it assumes, the security properties the project provides and
disclaims, and how findings are triaged - is documented in-repo at
[doc/modules/cassandra/pages/reference/security-model.adoc](./doc/modules/cassandra/pages/reference/security-model.adoc).