ktx/SECURITY.md
Andrey Avtomonov 00cdf2de90
refactor: enforce ktx naming and AGENTS.md compliance sweep (#289)
Align the tree with AGENTS.md/CLAUDE.md conventions:

- Rewrite user-facing strings, docs, and tests to lowercase `ktx`
  (no bare uppercase `KTX` tokens remain outside literal identifiers).
- Drop the legacy `historicSql` migration path and its now-unused
  helpers, per the no-backward-compat rule.
- Remove `as unknown as` / `any` casts: narrow `BaseTool` generics to
  `z.ZodObject`, add a typed `createLookerClient`, and delete the dead
  `getParametersSchema`/`toAnthropicFormat` pre-AI-SDK helpers.
- Use `InvalidArgumentError` for Commander parse failures.
- Finish the adapter→connector prose conversion in the `ktx.yaml` docs
  while keeping the literal `adapters` config key.
2026-06-11 13:49:45 +02:00

1 KiB

Security Policy

Reporting a vulnerability

If you believe you've found a security vulnerability in ktx, please report it privately through GitHub Security Advisories:

Report a vulnerability

If you cannot use GitHub Security Advisories, email support@kaelio.com instead. Please do not open a public issue, post in the ktx Slack, or share details elsewhere until we have published a fix.

When reporting, please include:

  • A description of the issue and its impact
  • Steps to reproduce
  • The ktx version affected

What to expect

  • We will acknowledge your report within a few business days.
  • We will work with you to verify the issue and develop a fix.
  • We will credit you in the resulting advisory unless you prefer to remain anonymous.

Supported versions

We provide security fixes for the latest released version of @kaelio/ktx. Older versions may receive fixes at the maintainers' discretion.