Sources of Security Information

Security is a priority for the NixOS community. The communication channels on security in the Nix ecosystem are:

• Discourse announcements on security for major events
• Nixpkgs security tracker for managing information on vulnerabilities in software distributed through Nixpkgs
• Security Triage Matrix room for triaging issues and coordinating mitigations
• Security Discussions Matrix room for discussions around security
• GitHub Security Advisories on Nixpkgs or NixOS and Nix
• GitHub issues related to security on NixOS, Nixpkgs, Nix

If the above sources are not enough to answer your question, please reach out to the team.

Security Disclosures

To privately report a security issue with NixOS, Nix, and its ecosystem, please email a member of the NixOS Security Team and we will ensure the issue is handled.

• Martin Weinelt
  Email: hexa@darmstadt.ccc.de
  GPG Fingerprint: F7D6 7CFB F2CA 32F1 641A 03DB 0D9F 7008 4786 0BC5

• Thomas Gerbet
  Email: thomas@gerbet.me
  GPG Fingerprint: F1C8 1040 67D6 6231 E2E7 8C03 3651 2CB8 E75E 6DD9