| Version | Supported |
|---|---|
| 1.0.x | ✅ Yes |
| 0.x.x | ❌ No |
Do NOT open public issues. If you discover a security vulnerability, please report it privately by opening a GitHub Security Advisory.
| Feature | Tool | Status |
|---|---|---|
| SAST | Bandit | ✅ Active |
| SCA | Safety, Dependabot | ✅ Active |
| Secrets Detection | TruffleHog | ✅ Active |
| Container Scanning | Trivy | ✅ Active |
- ✅ No hardcoded secrets
- ✅ Input validation
- ✅ Non-root Docker user
- ✅ Regular dependency updates
- ✅ CI/CD security gates
