git-valet 0.1.0

Transparently version private files (.env, secrets, notes, AI prompts) in a separate repo, synced via git hooks. Zero workflow change.
1
2
3
4
5
6
7
8
9
10
11
12
13
14

# Security Policy

## Reporting a Vulnerability

If you discover a security vulnerability in git-valet, please report it responsibly by opening a private security advisory on GitHub.

Do not open a public issue for security vulnerabilities.

## Scope

git-valet manages file paths and git operations. Security concerns include:
- Path traversal in tracked file paths
- Unintended file exposure through misconfigured valet repos
- Hook injection via crafted config files