Please do NOT report security vulnerabilities through public GitHub issues.

Instead, use GitHub's private security advisory feature:

1. Go to the Security tab in this repository
2. Click "Report a vulnerability"
3. Fill out the form with details

• A clear description of the vulnerability
• Steps to reproduce the issue
• Potential impact and severity
• Suggested fixes or mitigations (if known)

We'll credit you (with your permission) in our security advisory.

• Never commit API keys or tokens to version control
• Geeto stores credentials locally in .geeto/ — keep this directory private
• Rotate keys regularly
• Use the principle of least privilege

• All API calls use HTTPS
• Be cautious with third-party integrations
• Keep your system and dependencies updated

• Review code changes before merging
• Enable branch protection rules
• Monitor for unusual activity

Security fixes are released as patch versions with high priority. Announcements are made through:

• GitHub Security Advisories
• Release notes
• CHANGELOG.md

For security-related inquiries: amdev142@gmail.com

Thank you for helping keep Geeto and its users secure!