Skip to content

Security: hedgerow-dev/quickset

Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a potential vulnerability in quickset, please report it responsibly by emailing hello@hedgerow.dev.

Please do not disclose security vulnerabilities through public GitHub issues.

Scope

  • Scanner bypasses or parser crashes caused by crafted model files in the benchmark harness.
  • Unintended code execution or networking during inert payload generation.
  • Security issues in adapters or runner scripts.

We will acknowledge receipt of your report within 48 hours and work with you on a coordinated disclosure.

There aren't any published security advisories