To privately report a security issue with NixOS, Nix, and its ecosystem, please email a member of the NixOS Security Team and we will ensure the issue is handled. Our responses will be signed with our GPG keys.
Sources of Security Information
Security is a priority for the NixOS community. A variety of channels are used to coordinate development in this vein. Three of the main modes of communication about NixOS security are:
- The issues tagged "Security" on GitHub/NixOS
- The #nixos-security IRC channel on FreeNode
- The NixOS security discourse