Skip to content

SECURITY.md

Latest commit

 

History

History
21 lines (13 loc) · 929 Bytes

SECURITY.md

File metadata and controls

21 lines (13 loc) · 929 Bytes
Raw

Security Policy

AgentConfigScore scans files that may contain sensitive configuration, so security reports are taken seriously.

Reporting a vulnerability

Please do not publish exploit details, real credentials, or private repository content in a public issue.

Use GitHub's private vulnerability reporting / Security Advisory flow for this repository when available. Include:

  • affected version or commit;
  • a minimal reproduction;
  • expected vs. actual behavior;
  • security impact;
  • any suggested mitigation.

If private vulnerability reporting is unavailable, open a public issue containing only a non-sensitive request for a private reporting channel. Do not include the vulnerability details in that issue.

Scope

Especially useful reports include credential disclosure, unsafe command execution, path traversal, malicious config handling, or GitHub Action behavior that could expose repository data or tokens.