github.com/GoogleContainerTools/kaniko@v1.23.0/SECURITY.md (about)

     1  To report a security issue with Kaniko, please use https://g.co/vulnz. We use
     2  https://g.co/vulnz for our intake, and do coordination and disclosure here on
     3  GitHub (including using GitHub Security Advisory). The Google Security Team will
     4  respond within 5 working days of your report on g.co/vulnz.