Repositories that have been released on Github:

We encourage interested software developers and security researchers to inspect the code.

The Ministry of Health does not currently have capacity to handle pull requests and issue reports on GitHub, but we are happy to correspond through help@covidtracer.min.health.nz.

Any reports of security issues should be reported to vulnerability-disclosures@health.govt.nz according to the Ministry of Health responsible disclosure guidelines.

The app has been released under the AGPL license. Works derived from it must also be released under the same license.

We intend to release other system components over time to continue building trust in the integrity of the NZ COVID Tracer app.