# Code of conduct

## Our pledge

This project adopts the [Contributor Covenant, version 2.1](https://www.contributor-covenant.org/version/2/1/code_of_conduct/)
as its code of conduct. The linked text is part of this document: it defines expected
behaviour, examples of unacceptable behaviour, the maintainer's responsibilities and the
enforcement ladder. This file adds only what is specific to Import-CaCertificates.

In practice that means:

- discuss the code and its behaviour, not the person;
- criticism carries a verifiable fact: a command, a file, a line, an output;
- insults, harassment and publishing someone else's personal data are not acceptable;
- technical disagreements are settled by a measurement, not by volume;
- a private security report is never discussed in public before it is fixed.

## Scope

This code applies to issues, pull requests, discussions, code comments and the wiki of
this repository, and anywhere a person acts on behalf of the project. It applies equally
to maintainers and contributors.

## Reporting

Report a violation privately. Use the **Report abuse** control in the GitHub interface,
or contact the maintainer through <https://github.com/paulmann> and ask for a private
channel. Do not open a public issue about a person, and never report a security problem
in public: security follows [SECURITY.md](SECURITY.md).

Reports are handled confidentially. A reporter is not named publicly without consent.

## Consequences

A violation leads to a warning, then to restricted participation, then to a permanent ban.
The maintainer states the reason privately and keeps the decision on record. Trust
decisions about CA certificates are technical and are reviewed in public issues; conduct
decisions are not.

## Attribution

Contributor Covenant 2.1 is licensed under CC BY 4.0 and belongs to its authors. This file
declares the adoption and specifies the reporting channel for this project.