This policy is intended for all resources available on *.govdirectory.org* and any repository in the Govdirectory GitHub organization.

You can privately report a vulnerability to the Govdirectory team by creating a security advisory on GitHub. This report will be kept private while it is being assessed by the team.