Security

SECURITY.md

Security Policy

Security is critical for integrations because connectors may interact with external APIs, user data, and credentials.

Reporting security issues

Do not open public GitHub issues for security problems.

Instead, contact the maintainers privately.

Security rules for contributors

Never commit API keys or secrets.
Use .env.example for placeholder variables.
Validate incoming webhook payloads.
Avoid logging sensitive data.
Use least-privilege API scopes.
Document required permissions clearly.

There aren't any published security advisories