If you discover a security issue, report it privately to lead maintainer Antony Chazapis at chazapis@ics.forth.gr or open a private GitHub Security Advisory. Do not open a public issue.

When reporting, include:

• A description of the vulnerability
• Steps to reproduce (if possible)
• Impact and potential risk
• The affected release or commit, backend, and Kubernetes version
• Relevant logs or diagnostics with credentials and unrelated private data removed

We aim to respond within 5 business days and will work with you to investigate, address, and disclose the issue responsibly.

Your report will be kept confidential until a patch is released.

After a fix is implemented, we will announce the resolution in the release notes.

Thank you for contributing to a safer open source ecosystem!