Security policy link to /security/new returns 404

Author: spartan8806Created Aug 11, 2026Updated Aug 11, 2026
Labelsbug

Agent file

N/A

What's wrong?

The security policy directs people to report vulnerabilities through GitHub, but the reporting URL returns a 404.

Steps to reproduce:

  1. Open https://github.com/msitarzewski/agency-agents/security
  2. Follow the link to report a vulnerability (https://github.com/msitarzewski/agency-agents/security/new)
  3. A 404 page is shown instead of the reporting form.

Expected: the link opens a working vulnerability report form. Actual: 404 Not Found, so there is no usable way to report security issues privately.

Suggested fix

Enable private vulnerability reporting in the repository settings (Settings > Code security and analysis), or update SECURITY.md to point to an alternative reporting channel such as an email address.

Source: msitarzewski/agency-agents