DigitalOcean values the security of its open source projects. We appreciate the efforts of security researchers and the broader community to help keep our customers and business safe.

Please do not open public issues describing vulnerabilities.

DigitalOcean operates a public bug bounty program on Intigriti. Only repositories listed as in scope on the Intigriti program page are eligible for rewards. This repository is not listed there.

If you discover a vulnerability in this repository, we still encourage you to report it. Send your report to security@digitalocean.com. If you wish to encrypt your communication, follow these instructions.

• Responsible disclosure: Please do not publicly disclose the vulnerability without written permission from DigitalOcean.
• Clear description: Provide a detailed description of the vulnerability, including steps to reproduce it and any relevant proof-of-concept code.
• Impact assessment: Describe the potential impact of the vulnerability.

Thank you for helping keep DigitalOcean and our community secure.