Skip to content

Security: SSHcom/snow-privx

Security

SECURITY.md

Security Policy

Public Repository Rules

Do not commit real credentials, API keys, OAuth client secrets, tokens, private certificates, production hostnames, or customer-specific identifiers.

Use placeholder values such as example.service-now.com, privx.example.com, CLIENT_ID, and CLIENT_SECRET in committed examples.

Before publishing or accepting contributions, review changes for:

  • Hard-coded secrets or bearer tokens
  • Private certificates or key material
  • Internal hostnames, IP addresses, usernames, or group names
  • Production ServiceNow instance identifiers
  • Production PrivX tenant or host details

Reporting

If sensitive material is found in this repository, remove it from the active branch and rotate any affected credentials immediately.

There aren't any published security advisories