## TiDB Cloud Security Policy

## Vulnerability Management Policy


## Repo's security best practices

1. Consider Security when creating a new project
2. Don't store credentials in GitHub as code/configuration.
3. Delete sensitive data and GitHub history in the file
4. Add a security test in the PR phase
5. Replace the SSH key and personal access token in time
6. Review any code introduced to GitHub Security

## Reporting a Vulnerability

To report security vulnerabilities,Please contact TiDB Cloud security team in time via security-team@pingcap.com 

Thanks