Skip to content

Security: netgrif/devops-utils

Security

SECURITY.md

Security Policy

Reporting a vulnerability

If you find a security issue in this repository — including a script that mishandles credentials, is vulnerable to injection, or otherwise behaves unsafely against a target system — please report it privately rather than opening a public issue.

Use GitHub's private vulnerability reporting for this repository (Security tab → "Report a vulnerability"). This opens a private advisory visible only to the maintainers until a fix is ready.

Please include:

  • The script and version/commit affected.
  • Steps to reproduce, or the specific code path that's unsafe.
  • The potential impact (e.g. credential exposure, unintended data modification).

Scope notes

The scripts in this repository are operational tools meant to be run manually by administrators against Netgrif deployments (databases, application instances, etc.). They typically accept credentials as environment variables or interactive input rather than storing them. If you notice a script that logs, prints, or otherwise persists credentials or other sensitive data, that's in scope for a report.

There aren't any published security advisories