Jens/ForgeFlow
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases 24 Wiki Activity

Prepare ForgeFlow for public release #10

Merged
Jens merged 24 commits from codex/public-readiness-forgeflow into main 2026-08-31 18:17:57 +00:00
Conversation 0 Commits 24 Files Changed 40
+7
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 976a1fc0df - Show all commits
SECURITY.md
+7
View File
@@ -0,0 +1,7 @@
# Security policy
ForgeFlow can interact with local Git repositories, Gitea, update metadata and controlled deployment targets. Security-sensitive behavior is documented in [`docs/SECURITY.md`](docs/SECURITY.md).
Report vulnerabilities privately to the repository owner when disclosure could expose credentials, signing material, repository access details or deployment infrastructure.
Never commit Gitea tokens, SSH private keys, release-signing private keys, deployment credentials or local repository state. The packaged signing public key is intentionally public; private signing material must remain outside Git.