The GitHub account is gone again, so git.zacharyzhang.com/ZacharyZhang-NY/Kigi-CLI is the canonical repo. Reversef7a4cb6: - .gitea/workflows/release.yml: restore the Gitea edition retired inf7a4cb6(draft release, per-target upload, SHA256SUMS, then publish). The Windows leg runs on the windows-amd64 label the current runner advertises. - .github/workflows/{release,warm-cache}.yml: drop them; they target hosted GitHub runners and softprops, and Gitea ignores them once .gitea exists. - kigi-env: update_base_url defaults to the Gitea Releases API again. - install.sh / install.ps1: resolve releases from git.zacharyzhang.com. - feedback, /docs, SECURITY.md, frontend worker + site: repo, issues and raw-file links point at git.zacharyzhang.com. - docs/RELEASE.md: Gitea edition of the checklist with the current runners. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
470 B
470 B
Security Policy
Kigi is a community build; report vulnerabilities on the Kigi issue tracker. Issues there are public, so please leave out any detail that would make a report directly exploitable — open with the affected area and impact, and a maintainer will follow up for the rest.
Dependency advisories are gated in CI with cargo deny check advisories;
documented exceptions live in deny.toml.