Only the latest commit on the main branch is supported.

Please do not open a public issue for security problems.

Use GitHub's private vulnerability reporting: open the Security tab of this repository and choose Report a vulnerability. Include the affected component (server, dashboard, agent or scripts), reproduction steps and the impact you observed.

You can expect an acknowledgement within a few days. Confirmed issues are fixed on main and disclosed after a fix is available.

• Credentials (OAuth client secrets, SMTP passwords, the initial admin password) are provided by the operator at runtime and must never be committed.
• Dependencies are monitored with Dependabot and secret scanning with push protection.