# Security Policy

Kigi is a community build; report vulnerabilities on the
[Kigi issue tracker](https://github.com/ELY-Open-Source/Kigi-CLI/issues).
Issues there are public, so please leave out any detail that would make a
report directly exploitable — open with the affected area and impact, and a
maintainer will follow up for the rest.

Dependency advisories are gated in CI with `cargo deny check advisories`;
documented exceptions live in `deny.toml`.