🔐

Secrets Management

Tokens and credentials in .env files excluded from repo. Automatic apiKey redaction.

🐳

Non-root Container

The gateway runs as "node" user (UID 1000), reducing attack surface.

🔄

Git Lock

Scripts use flock to prevent race conditions.

📝

Audit

All changes versioned with detailed commits.

Report Vulnerabilities

If you discover a vulnerability, report it responsibly. Do not disclose vulnerabilities before they are fixed.

View security policy