Skip to content

Security: ANSSI-FR/chipsec-check

Security

SECURITY.md

Security Policy

Disclaimers

This tool aims to generate a bootable image for testing the security status of a computer platform. The tools involved (especially Chipsec) need elevated privileges to run and might have side effects on the systemd under test. This is not a security vulnerability but the intended purpose of the tool, please don't report a security advisory about that.

If you find a vulnerability in the tools themselves, please report them to their respective authors.

Reporting a Vulnerability

If you discover a security vulnerability in this project, please help us address it responsibly by following these steps:

  1. Do not publicly disclose the vulnerability.
  2. Contact us directly at opensource@ssi.gouv.fr with the following details:
    • A clear description of the issue.
    • Steps to reproduce the vulnerability.
    • Any potential impact or exploit scenarios.

Thank you for helping us keep this project secure!

There aren’t any published security advisories