Private security disclosure route?

[dodge1218]

Hi maintainers,

I tried to use GitHub private vulnerability reporting for this repository, but it appears to be disabled. Is there a preferred private channel for security reports?

I have a potential security report for this repo and do not want to post technical details publicly.

Thanks.

[shreyas-lyzr]

Apologies for the delay — and thank you for asking rather than just posting publicly.

I've enabled GitHub's private vulnerability reporting for this repository — it should now be available under Security → Report a vulnerability on this repo.

Alternative direct channel: shreyas@lyzr.ai. PGP key on request.

Going to add a SECURITY.md to the repo this week documenting the official disclosure process, response SLA, and scope. Until then please use either channel.

Genuine appreciation for asking — keeping this issue open until SECURITY.md lands.