ZacharyZhang-NYandClaude Opus 5.5
ddecaea075
The GitHub account is gone again, so git.zacharyzhang.com/ZacharyZhang-NY/Kigi-CLI is the canonical repo. Reversef7a4cb6: - .gitea/workflows/release.yml: restore the Gitea edition retired inf7a4cb6(draft release, per-target upload, SHA256SUMS, then publish). The Windows leg runs on the windows-amd64 label the current runner advertises. - .github/workflows/{release,warm-cache}.yml: drop them; they target hosted GitHub runners and softprops, and Gitea ignores them once .gitea exists. - kigi-env: update_base_url defaults to the Gitea Releases API again. - install.sh / install.ps1: resolve releases from git.zacharyzhang.com. - feedback, /docs, SECURITY.md, frontend worker + site: repo, issues and raw-file links point at git.zacharyzhang.com. - docs/RELEASE.md: Gitea edition of the checklist with the current runners. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
11 lines
470 B
Markdown
11 lines
470 B
Markdown
# Security Policy
|
|
|
|
Kigi is a community build; report vulnerabilities on the
|
|
[Kigi issue tracker](https://git.zacharyzhang.com/ZacharyZhang-NY/Kigi-CLI/issues).
|
|
Issues there are public, so please leave out any detail that would make a
|
|
report directly exploitable — open with the affected area and impact, and a
|
|
maintainer will follow up for the rest.
|
|
|
|
Dependency advisories are gated in CI with `cargo deny check advisories`;
|
|
documented exceptions live in `deny.toml`.
|