mirror of
https://github.com/UditAkhourii/adhd.git
synced 2026-09-14 16:00:16 +08:00
Haris Chechi
5001cd5cec
- Fix command injection in summary.yml: replace shell gh command with actions/github-script to avoid shell interpolation of AI output - Harden prompt injection defense with structural tag boundaries - Add Zod validation for all LLM JSON output (schemas were a dependency but unused) - Add CLI input validation with bounds checking for numeric flags and file size limit for --context - Replace biased sort-based shuffle with Fisher-Yates in frame selection - Add npm test to CI workflow - Update actions/stale from v5 to v9 with real messages - Fill in SECURITY.md with responsible disclosure policy Co-authored-by: Haris Chechi <chechi@Hariss-Air.lan> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
795 B
795 B
Security Policy
Supported Versions
| Version | Supported |
|---|---|
| 0.1.x | ✅ |
Reporting a Vulnerability
If you discover a security vulnerability in this project, please report it responsibly:
- Do not open a public GitHub issue.
- Email the maintainer directly or use GitHub's private vulnerability reporting.
- Include a description of the vulnerability, steps to reproduce, and potential impact.
You should expect an initial response within 72 hours. We will work with you to understand and address the issue before any public disclosure.