Security

docs/SECURITY.md

Security Notes

This repository is sanitized for public GitHub sharing.

Removed or Redacted

Google Sheets credential IDs
Mistral credential IDs
Google Sheet IDs and tab IDs
n8n workflow ID, version ID, and instance ID
OAuth tokens and API keys
Real client names, emails, and feedback
Private values in screenshots

Public Workflow

workflow.json is a scrubbed public export. It uses YOUR_* placeholders for private IDs and credentials.

After importing the workflow into n8n, configure your own credentials privately inside n8n.

Before Publishing Future Updates

Run a secret scan before every push:

gitleaks detect --source . --redact --verbose

Do not commit:

.env files
exported credentials
API keys
OAuth tokens
live webhook URLs
private Google Sheet IDs
screenshots with names, emails, browser bars, or account details

If a real secret is committed, rotate or revoke it first, then clean the repository history.

There aren't any published security advisories