Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Version	Supported
master	✅

Reporting a Vulnerability

Report security issues privately to conradcjwilson0@gmail.com. Do not open public issues for active vulnerabilities.

Hardening

Do not commit .env or files containing secrets
Rotate all example/default credentials before production
Enable GitHub secret scanning and vulnerability alerts in repository settings
Require status checks before merge when repository becomes public-facing

There aren't any published security advisories