Skip to content

Repository navigation

Security: equinor/power-platform-skills

Security

Report a vulnerability

SECURITY.md

Security

If you discover a security vulnerability in this project, do not report it through public GitHub issues.

Report the issue

Use GitHub's private vulnerability reporting on this repository: Security, then Report a vulnerability. The report is visible only to @equinor/dcs-power-platform-team until an advisory is published.

Critical or time-sensitive issues

Phone the Equinor helpdesk:

  • Norway (+47) 51 999 222
  • US/Canada (+1) 713 878 6970

Vulnerabilities in upstream or Microsoft code

Most plugin content in this repository is synced from microsoft/power-platform-skills. If the vulnerability is in unmodified upstream code, report it to Equinor first as described above. The platform team coordinates upstream disclosure so that the fork and upstream are fixed together.

Vulnerabilities in the Power Platform products themselves go to the Microsoft Security Response Center, not here.

There aren't any published security advisories