Skip to content

Security: Ghraven/work

Security

SECURITY.md

Security Policy

This is a static portfolio and service landing site. It should not collect secrets, passwords, payment data, or private client files.

Reporting

Please report suspected security issues privately by email:

Include the affected URL, what you observed, and reproduction steps if possible.

Scope

In scope:

  • Public pages under rollycalma.com
  • Public static assets in this repository
  • Contact-form or link behavior shipped from this repository

Out of scope:

  • GitHub Pages platform-level issues
  • Third-party services not controlled by this repository
  • Spam, social engineering, or automated high-volume scans

Please do not run destructive tests, denial-of-service tests, or attempts to access private accounts or systems.

There aren't any published security advisories