Support
APF is under active development. Fixes, including security fixes, are provided for the repository’s default branch until versioned releases begin.
Before You Ask
- Check Troubleshooting.
- Look up any reason code in Error Reference.
- Search the repository’s open issues.
Report a Bug
Open an issue in the APF repository with:
- The APF commit and the OpenShell version you run.
- How you deployed APF: native processes, containers, or systemd.
- The steps that reproduce the problem, and what you expected.
- The relevant audit records and service logs.
Remove tokens, keys, and other secrets from logs, bundles, and configuration before you share them.
Report a Security Vulnerability
Do not report security vulnerabilities in public issues, pull requests, or discussions. Report them to the NVIDIA Product Security Incident Response Team (PSIRT):
- Web: Security Vulnerability Submission Form
- Email: psirt@nvidia.com
- Encryption: NVIDIA public PGP key
Include the affected commit, the vulnerability type and component, reproduction steps, the potential impact, and any known mitigations. Coordinate disclosure with NVIDIA PSIRT and do not publish details until a fix or mitigation is available. Refer to NVIDIA’s PSIRT policies.
Next Steps
- To contribute a fix, refer to Contributing.