docs: take security reports through GitHub private vulnerability reporting
Merged
DO
11d ago+1+1+0123456789-1-1-0123456789
The security@petry-projects.dev address never received mail (the domain has no DNS). Private vulnerability reporting is now enabled on this repo, so reports arrive as private draft advisories and no email address is published.
1 file changed, 1 insertion(+), 1 deletion(-)
š¤ Generated with Claude Code
Problem
See the linked issue.
Risk
Low ā documentation/configuration only; no runtime code paths change.
Test plan
No test files were added or updated. Verification: bash scripts/dev-lead-lint.sh (shellcheck --severity=warning) ran pre-commit; the existing CI (bats + lint) guards the change.
Rollback
Revert this PR. No non-revertible side effects (no tags, migrations, or external state).
Monitoring
n/a ā no runtime effect; documentation/configuration only.