Security

SECURITY.md

Security Policy

Reporting vulnerabilities

Please report potential vulnerabilities privately to maintainers. Do not open public issues containing exploit details or sensitive environment data.

Security expectations

Credential files must remain mode 0600.
Secrets must not be passed in plaintext CLI arguments.
Logs must avoid secret values and unnecessary stack traces.
Network failures and auth failures must be classified clearly for safe triage.

There aren't any published security advisories