Kyverno and its sub-projects follow the security practices published and maintained at https://github.com/kyverno/community/blob/main/SECURITY.md.