Files
erpnext/SECURITY.md
Diptanil SahaandClaude Opus 5.5 fe462c2ca3 chore: add OSS Scanner build and security contact (#60450)
* docs: add security contact email to SECURITY.md

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* chore: add OSS Scanner build and threat model

Add .oss-scanner/Dockerfile and .oss-scanner/threat_model.md for the
anthropics/oss-scanner enrollment (projects/erpnext). The Dockerfile builds a
bench from this checkout with MariaDB and Redis inside the image, so the
scanner can exercise the app offline over HTTP.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-12 13:18:10 +05:30

528 B

Security Policy

The ERPNext team and community take security issues seriously. To report a security issue, please email security@frappe.io or go through the information mentioned here.

You can help us make ERPNext and all its users more secure by following the Reporting guidelines.

We appreciate your efforts to responsibly disclose your findings. We'll endeavor to respond quickly, and will keep you updated throughout the process.