Security

SECURITY.md

Security Policy

Report a Vulnerability

Do not open a public issue. Use GitHub Security Advisories instead:

👉 Report here

Include: steps to reproduce, impact, and suggested fix if possible.

What Counts

Unauthorized API access
Credential leaks
Injection vulnerabilities
NATS permission bypass
Committed secrets

Disclosure

Give maintainers reasonable time to patch before going public.

There aren't any published security advisories