Skip to content

Security: oddrationale/deepagents-azure-blob-backend

SECURITY.md

Security Policy

Supported Versions

Version Supported
0.1.x

Reporting a Vulnerability

If you discover a security vulnerability in this package, please report it responsibly:

  1. Do not open a public GitHub issue
  2. Email the maintainers or use GitHub's private vulnerability reporting
  3. Include a description of the vulnerability and steps to reproduce

We aim to acknowledge reports within 48 hours and provide a fix within 7 days for critical issues.

Security Considerations

  • This package uses DefaultAzureCredential by default, which follows the Azure SDK credential chain. Ensure your environment is configured securely.
  • Connection strings should never be committed to version control. Use environment variables or Azure Key Vault.
  • The prefix configuration option provides namespace isolation but is not a security boundary. Use separate containers or storage accounts for true tenant isolation.

There aren’t any published security advisories