Skip to content

Security: bpnace/Documentation-RAG

Security

SECURITY.md

Security Policy

This repository is a sanitized case study. It is not a production workflow, template, or deployable automation bundle.

Public Safety Rules

Do not commit:

  • n8n exports or execution payloads
  • credentials or credential references
  • webhook paths, source URLs, or server URLs
  • API keys, tokens, Basic auth, Bearer auth, or private keys
  • account identifiers, table names, database names, or collection names
  • real prompts, retrieval rules, source lists, or provider configuration
  • local filesystem paths or private infrastructure names

Reporting

Report sensitive findings privately through GitHub security reporting. Do not open public issues containing secrets, live endpoints, screenshots with account details, or production payloads.

Validation

Run this before publishing changes:

npm test

The validator is intentionally strict and may block harmless content if it looks like a live implementation detail.

There aren't any published security advisories