Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability, please report it responsibly:

Do not open a public GitHub issue
Email the maintainer or use GitHub's private vulnerability reporting

Supported Versions

Version	Supported
1.x	✅

Build Verification

All release binaries are:

Built from source via GitHub Actions (fully reproducible)
Signed via SignPath.io for code integrity
Available alongside source code for independent verification

There aren't any published security advisories