What this record establishes
Reviewed policy
An individually reviewed public policy is linked to this program page.
Read the reviewed policy profile →
Directory page 1 explicitly labels this Responsible disclosure; full program policy not reviewed; no active/paused status shown.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
https://github.com/grafana/grafana | Source code | Tier 1 |
Non-Core Grafana Plugins | Other | Tier 1 |
https://github.com/grafana/alloy | Source code | Tier 1 |
https://github.com/grafana/faro-web-sdk | Source code | Tier 1 |
https://github.com/grafana/k6 | Source code | Tier 1 |
https://github.com/grafana/beyla | Source code | Tier 1 |
https://github.com/grafana/pyroscope | Source code | Tier 1 |
https://github.com/grafana/loki | Source code | Tier 1 |
https://github.com/grafana/mimir | Source code | Tier 1 |
https://github.com/grafana/tempo | Source code | Tier 1 |
https://github.com/grafana/* | Wildcard | Tier 2 |
| Asset | Type | Group / eligibility |
|---|---|---|
| No rows captured. This does not establish that the program has no assets or restrictions. | ||
Capture limits
- No dedicated announcement archive or policy revision date was established.
- Logged-out text review; authenticated eligibility and incorporated documents were not exhaustively checked.
- High-level summaries omit inventories and testing instructions. Live terms prevail; this record grants no authorization.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
Appears in Discovery, Profile. No identity match is inferred from a shared company name.