Skip to content

Security: LambdaTest/evidence-cli

Security

SECURITY.md

Security Policy

Supported Versions

Version Supported
0.1.x Yes

Reporting a Vulnerability

Do not file security issues as public GitHub issues.

Instead, email security@testmuai.com with:

  • Description of the vulnerability
  • Steps to reproduce
  • Impact assessment (if known)
  • Your contact information

Scope

This policy covers:

  • The evidence-cli library and its CLI (validate, finalize)
  • Reading and sealing .evidence packs — path containment, zip handling, and ranged reads over remote blobs
  • The JSON Schemas and the validation logic

Thank you for helping keep evidence-cli safe.

There aren't any published security advisories