This is an unofficial, community-maintained project. It is not affiliated with, sponsored by, endorsed by, or speaking for Scouting America / the Boy Scouts of America. This security policy pertains only to the unofficial, community-written content within this repository.

Any vulnerability which pertains to Scouting America's own official systems, such as their websites, tools, APIs, or anything else, must be reported directly to Scouting America via their own official channels. Do not report it to us. WE ARE NOT SCOUTING AMERICA!

We are NOT Scouting America. Do not report any security-sensitive information to us which has to do with upstream behavior in Scouting America's own systems.

Security vulnerabilities (which pertain only to the unofficial, community-maintained contents of this repository itself, and not to the behavior of any official Scouting America system itself) may be reported to us through Github's security reporting tool, located here: https://github.com/scouting-commons/.github/security/advisories/new. Do not include personal data, or details of vulnerabilities in official Scouting America systems, in your report.