Security

Built for trust.

Core Principles

Least privilege access
Secrets stay in CI
Read-only integrations

Recommended Setup

Use GitHub Secrets
Minimal GHA permissions
Short-lived credentials

Vulnerability? security@stoney.dev

Updated: Feb 25, 2026