Jens/ForgeFlow
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases 24 Wiki Activity

Merge remote-tracking branch 'origin/chatgpt/repo-hygiene-forgeflow'

Browse Source 
# Conflicts:
#	SECURITY.md
This commit is contained in:
NuklearRabbit
2026-08-31 07:52:31 +02:00
parent 20290e65c8 6fd69a2cd8
commit 5ddb6fe8f5
3 changed files with 30 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
SECURITY.md
+2
View File
@@ -7,3 +7,5 @@ Report suspected vulnerabilities privately to the repository owner. Do not publi
For a useful report, include the affected ForgeFlow version/commit, component, minimal reproduction steps, expected and observed behaviour and security impact. Use sanitized or synthetic repository/server data whenever possible.
The current release model requires exact-commit verification, origin-constrained credential use, signed update manifests, redacted diagnostics and bounded deployment adapters. Changes must not silently weaken those guarantees.
Never commit Gitea tokens, SSH private keys, release-signing private keys, deployment credentials or local repository state. The packaged signing public key is intentionally public; private signing material must remain outside Git.