Skip to content

Security: b2ty9t7yhz-source/crashqueuelab

SECURITY.md

Security and Data Scope

CrashQueueLab V1 is a local educational and testing project. It is not hardened for untrusted tenants or production workloads.

Supported data

  • Synthetic JSON payloads only
  • Local SQLite databases only
  • Trusted in-process handlers only

Do not place patient data, credentials, access tokens, secrets, or production job payloads in examples, tests, issue reports, or generated scenario artifacts.

Out of scope

V1 does not provide authentication, authorization, sandboxing, encryption, remote execution, network transport, or arbitrary function serialization.

For sensitive reports, use GitHub's private vulnerability reporting when it is available for this repository. Otherwise, open a minimal issue containing only synthetic data and enough information to reproduce the problem safely. Never publish credentials, patient data, production payloads, or other secrets.

There aren't any published security advisories