If you discover a security vulnerability in IngestBench, please report it responsibly. Do not open a public issue.

• GitHub Security Advisory: Use the private vulnerability reporting feature on this repository (preferred).
• Email: Send details to m.aslaner@outlook.com with the subject "IngestBench Security Report".

Please include a description of the vulnerability, steps to reproduce, and affected version(s).

This is a personal side project maintained in my spare time, so response times will vary. I'll do my best to acknowledge reports promptly and address confirmed issues in a timely manner.

• gitleaks secret scan on every PR
• govulncheck dependency vulnerability scan (nightly + on push to main)
• golangci-lint static analysis on every PR
• CycloneDX SBOM attached to every GitHub Release