Report a security issue

We welcome security reports about jojo.dev.br and our own products. We do not currently run a bug bounty or a formal vulnerability disclosure program, and we do not offer monetary rewards.

Please email security@relay.jojo.dev.br with the affected product or URL, the issue’s impact, and steps to reproduce it. Send sensitive details privately; do not post them in a public issue. The contact file covers the jojo.dev.br host only and does not authorize testing of other systems.

We will review your report and coordinate a fix and disclosure with you. For a confirmed vulnerability, we can create a GitHub Security Advisory where the affected project supports one, credit you with your consent, and help request a CVE ID when eligible. CVE assignment is decided by the issuing authority and cannot be guaranteed.

We would also be happy to recognize you in a future Hall of Fame on this site, with your permission. The Hall of Fame is not live yet; we will ask before publishing your name or handle.

Signing public key

Use this Ed25519 public key to verify signatures made by Jojo. Download the public key.

ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL+4T0zuXXk/eKdQ5OjwZDa9Eieuz63e3gwijCZWc0Ip