The GitHub Coordinated Disclosure of Security Vulnerabilities and Bug Bounty Program sets out the process for responsibly reporting security issues and the rewards available for verified findings. It is part of GitHub’s official security framework, backed by a clear Legal Safe Harbor Policy and trusted as a leading industry standard for researcher engagement.