Skip to content

Latest commit

 

History

History
22 lines (13 loc) · 1.25 KB

SECURITY.md

File metadata and controls

22 lines (13 loc) · 1.25 KB

Security Policy

Supported Versions

Version Supported
0.2.x Yes
Earlier versions No

Reporting a Vulnerability

Please do not report security vulnerabilities through public GitHub issues.

Use the repository's private vulnerability reporting form, or email security concerns to info@mikesoft.it. Include a clear description, the affected version, reproduction details, and the potential impact. You can expect an acknowledgement within five business days.

Please allow a reasonable remediation window before public disclosure. The maintainer will coordinate status updates and credit with the reporter.

Security Model

This extension launches user-configured terminal commands. Review workspace trust prompts and configuration changes before running commands in untrusted repositories.

The extension does not install GitHub Copilot CLI, create installer scripts, or invoke package managers or shell installers. If the configured CLI command is missing, it can only offer to open GitHub's official installation documentation in the default browser.