# How-tos for reporting and fixing vulnerabilities

Learn how to establish security policies and enable private channels for reporting vulnerabilities in your repository.

## Links

* [Adding a security policy to your repository](/en/code-security/how-tos/report-and-fix-vulnerabilities/configure-vulnerability-reporting/add-security-policy)

  You can give instructions for how to report a security vulnerability in your project by adding a security policy to your repository.

* [Configuring private vulnerability reporting for a repository](/en/code-security/how-tos/report-and-fix-vulnerabilities/configure-vulnerability-reporting/configure-for-a-repository)

  Owners and administrators of public repositories can allow security researchers to report vulnerabilities securely in the repository by enabling private vulnerability reporting.