Skip to content

Security: cto-legends/cto-legends-library

Security

SECURITY.md

Security Policy

Reporting

Report vulnerabilities privately through GitHub Security Advisories on https://github.com/cto-legends/cto-legends-library

Do not open a public issue with secrets, tokens, private URLs, or machine paths.

Scope

This repository is a catalog, doctor, and setup helper. It clones public module sources the user asked for. It must never:

  • store API keys
  • vendor house configuration
  • download unsigned binaries from ad-hoc URLs
  • mark a private-house module as cloneable

There aren't any published security advisories