Skip to content

Security: Emuthmartinez/formation-cloud-cli

Security

SECURITY.md

Security

The Cloud CLI is a small client for one HTTPS origin. It writes only the Skill's Markdown files and one JSON install receipt into the target the person names, after a dry run and an explicit --apply. It never runs a file it downloads.

Report a vulnerability

For a report that should stay private until it is fixed, use the contact form at https://edumartinez.ai/#contact and mention @getformation/cloud-cli. For anything else, open an issue at https://github.com/Emuthmartinez/formation-cloud-cli/issues.

You will get an acknowledgement within seven days. A fix ships as a new npm release; the version in this repository's package.json names the release it describes.

Supported versions

The latest release on npm is supported. Older releases are not patched.

Verify what you install

npm pack @getformation/cloud-cli@1.2.1 && tar -xzf getformation-cloud-cli-1.2.1.tgz && ls package/src package/connector

The code is under package/src; the connector is package/connector/SKILL.md. The tarball's bin, src, and connector match this repository at the same version. Package metadata added after a release, such as the repository field added after 1.2.1, reaches npm with the next release.

There aren't any published security advisories