Request: Enable GitHub Private Vulnerability Reporting

[sfwani]

Hi Flow Wallet team,

Could you please enable GitHub's private vulnerability reporting for this repository?

Currently there is no active security disclosure channel -- the repository has no SECURITY.md, and the HackenProof bug bounty program linked from flow.com/flow-responsible-disclosure has an expired end date (Sep 2025). FRW-Extension (the previous repo) is archived.

Enabling private reporting takes about 30 seconds (Settings > Code security > Private vulnerability reporting > Enable) and gives security researchers a confidential channel to report issues without public disclosure.

Thank you.

[sfwani]

Hi @lmcmz @lealobanov @tombeckenham - following up on this request from April. We have a verified security finding for FRW that we'd like to disclose responsibly. Could you enable private vulnerability reporting on this repo so we can submit it through GitHub's security advisory workflow? Thanks!