Skip to content

Security: vardhjain/Knowledge_Graph_Question_Answering

Security

SECURITY.md

Security Policy

This is a research project, but a few things are worth handling carefully.

Reporting a vulnerability

If you find a security issue (for example, an accidental credential commit or a dependency vulnerability), please do not open a public issue. Instead, use GitHub's private vulnerability reporting or email the maintainer. You can expect an acknowledgement within a few days.

Secrets

  • Never commit real credentials. ArangoDB and LLM settings are read from the environment (or a local .env, which is git-ignored). Use .env.example as a template, and Colab Secrets for notebook runs.
  • If a secret is ever committed, rotate it immediately — removing it from the latest commit is not enough, as it remains in git history.

Supported versions

The latest release on main is supported. This project pins minimum dependency versions in requirements.txt; run pip list --outdated periodically.

There aren't any published security advisories