The safeguards map / 4.4 Disclosure and advisories
Disclosure Check
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A tool that looks for the way to report a vulnerability to an open source project, such as a SECURITY.md file or private vulnerability reporting.
Where it sits
4.4 Disclosure and advisories (primary): Looks for the contact points and reporting mechanisms an open source project offers for vulnerability reports, so a reporter can find where to send one.
The purpose of Disclosure Check is to automate what a human would do when trying to discover the best way to report a vulnerability to a project.
captured
Disclosure Check works by looking for contact information (email, URLs, etc.) in the following places
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who run it
- Runs
- by hand
Handoffs
None recorded.
Listed, not drawn: it is not yet released, and no documented handoff and no foundation home places it on the map.
Collector's note
The repository has no GitHub releases, though its README says it is distributed through PyPI and Docker Hub. The OpenSSF TAC project table has no row for it, so it has no foundation home here.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.