# Security Policy

Kigi is a community build; report vulnerabilities via
[GitHub private vulnerability reporting](https://github.com/ZacharyZhang-NY/Kigi-CLI/security/advisories/new)
on this repository. Please do not open public issues for security reports.

Dependency advisories are gated in CI with `cargo deny check advisories`;
documented exceptions live in `deny.toml`.