Instead, please email your findings to the maintainer or use GitHub's private vulnerability reporting feature.
When using Gitlane:
- Never commit
.envfiles — they contain API keys - Keep
settings.jsonlocal — contains personal preferences - Don't share your Groq or GitHub tokens — treat them like passwords
- Use strong API keys — regenerate compromised ones immediately
- Your GitHub activity data remains local
- API keys never leave your
.envfile - Local database files are not synced publicly
Keep Gitlane updated to receive security patches:
git pull origin main
pip install -r requirements.txt --upgrade