Skip to content

Security: bobbyjohnstx/tinycode-operator

Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability, please report it responsibly:

  1. Do NOT open a public GitHub issue
  2. Use GitHub's private vulnerability reporting
  3. Include:
    • Description of the vulnerability
    • Steps to reproduce
    • Impact assessment
    • Suggested fix (if any)

Response Timeline

  • Acknowledgment: Within 48 hours
  • Assessment: Within 1 week
  • Fix: Depending on severity, typically within 2 weeks for critical issues

Supported Versions

Version Supported
0.1.x Yes

Security Best Practices

  • Set TINYCODE_SERVER_PASSWORD when exposing the server on a network
  • Never commit API keys or secrets to the repository
  • Review MCP server configurations — they execute with your user permissions

There aren't any published security advisories