If you discover a security vulnerability in FUSE, please report it responsibly.

Do not open a public GitHub issue for security vulnerabilities.

Instead, please email security concerns to the maintainers via the Uranus Technologies contact page or open a private security advisory on GitHub:

1. Go to the Security Advisories page
2. Click "New draft security advisory"
3. Provide a description of the vulnerability and steps to reproduce

We will acknowledge receipt within 48 hours and provide a timeline for a fix.

• Container images are scanned with Trivy on every release
• Production images use distroless base (gcr.io/distroless/static-debian12)
• Containers run as non-root user
• Static binary with CGO disabled
• Code quality enforced via golangci-lint v2