Skip to content

security : clarify about AI-generated reports - #26579

Merged
ngxson merged 3 commits into
masterfrom
xsn/security_policy_ai
Aug 5, 2026
Merged

ngxson merged 3 commits into
masterfrom
xsn/security_policy_ai

Conversation

@ngxson

@ngxson ngxson commented Aug 4, 2026

Copy link
Copy Markdown
Collaborator

Overview

We don't accept reports that can be found easily by AI agents (for example, our internal agent)

Requirements

@ngxson
ngxson requested a review from ggerganov as a code owner August 4, 2026 14:27
@github-actions github-actions Bot added the documentation Improvements or additions to documentation label Aug 4, 2026
Comment thread SECURITY.md Outdated

llama.cpp has an AI security scanner that scans the code periodically. The full prompts and tool set can be found in [ggml-org/security-scan-prompt](https://github.com/ggml-org/security-scan-prompt).

If you are a researcher reporting bugs or vulnerabilities to llama.cpp, please note that findings produced using this repository will not qualify as valid reports.

@ggerganov ggerganov Aug 4, 2026 •

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The second paragraph is a bit redundant to have mentioned here since it is already stated in the https://github.com/ggml-org/security-scan-prompt README - consider removing it

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fair point, it's also mentioned in the paragraph below, so ok to remove this

Comment thread SECURITY.md
@ngxson
ngxson merged commit 9303cdd into master Aug 5, 2026
3 checks passed
satindergrewal pushed a commit to satindergrewal/llama.cpp that referenced this pull request Aug 12, 2026
* security : clarify about AI-generated reports

* nits

* nits 2
huaxel pushed a commit to huaxel/CachyLLama that referenced this pull request Aug 12, 2026
* security : clarify about AI-generated reports

* nits

* nits 2
brittlewis12 pushed a commit to brittlewis12/llama.cpp that referenced this pull request Aug 17, 2026
* security : clarify about AI-generated reports

* nits

* nits 2
thecodacus pushed a commit to thecodacus/llama.cpp that referenced this pull request Sep 7, 2026
* security : clarify about AI-generated reports

* nits

* nits 2
zbrad pushed a commit to zbrad/llama.cpp that referenced this pull request Sep 10, 2026
* security : clarify about AI-generated reports

* nits

* nits 2
pl752 pushed a commit to pl752/llama.cpp that referenced this pull request Sep 15, 2026
* security : clarify about AI-generated reports

* nits

* nits 2
frostyautumnleaf pushed a commit to frostyautumnleaf/llama.cpp that referenced this pull request Oct 5, 2026
* security : clarify about AI-generated reports

* nits

* nits 2
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants