The Ocre community takes security seriously. If you discover a security issue, please bring it to our attention right away!
Please DO NOT file a public issue, instead send your report privately to Ocre-TSC+owner@lists.lfedge.org.
The main Ocre repo's CONTRIBUTING.md has additional information about contributions and security approaches.