Security policy link to /security/new returns 404
Author: spartan8806Created Aug 11, 2026Updated Aug 11, 2026
Labelsbug
Agent file
N/A
What's wrong?
The security policy directs people to report vulnerabilities through GitHub, but the reporting URL returns a 404.
Steps to reproduce:
- Open https://github.com/msitarzewski/agency-agents/security
- Follow the link to report a vulnerability (https://github.com/msitarzewski/agency-agents/security/new)
- A 404 page is shown instead of the reporting form.
Expected: the link opens a working vulnerability report form. Actual: 404 Not Found, so there is no usable way to report security issues privately.
Suggested fix
Enable private vulnerability reporting in the repository settings (Settings > Code security and analysis), or update SECURITY.md to point to an alternative reporting channel such as an email address.
Source: msitarzewski/agency-agents