ZarishHealth publishes organization profile, community-health, and brand-kit materials in this repository. Other repositories may contain application or deployment code; report a finding against the repository where it occurs.

Please use GitHub Private Vulnerability Reporting:

1. Open the affected repository's Security tab.
2. Select Report a vulnerability.
3. Include the affected repository, path or release, impact, reproduction steps, and a sanitized proof of concept.

For this repository, the direct report link is: https://github.com/zarishhealth/.github/security/advisories/new

Do not open a public issue, pull request, or discussion for a suspected vulnerability. Do not include real patient data, credentials, access tokens, or production identifiers in a report.

• Affected repository, file, workflow, or release
• Vulnerability class and security impact
• Minimal reproduction steps or sanitized proof of concept
• Any conditions needed to reproduce the issue
• Suggested mitigation, if known

Good-faith security research is welcome. Avoid accessing, modifying, or destroying real patient data or live systems; minimize testing against services; and allow maintainers reasonable time to investigate and remediate before public disclosure.

The project does not claim HIPAA, GDPR, or other regulatory compliance or certification without deployment-specific evidence. Public examples and fixtures must use synthetic data only.