Please report vulnerabilities privately via GitHub Security Advisories: https://github.com/dtduc-git/harnessguard/security/advisories/new

Do not open a public issue for security problems.

harnessguard is a static analyzer. It never executes scanned workflows, agents or MCP servers, and it makes no network requests during a scan.