We appreciate responsible disclosure of security vulnerabilities.

Please do not report security vulnerabilities through public GitHub issues. Public disclosure before a fix is available can put users at risk.

Send an email to: security@altairalabs.ai

Include the following information:

• Description of the vulnerability
• Steps to reproduce the issue
• Potential impact and attack scenarios
• Suggested fixes or mitigations, if any
• Your contact information for follow-up

• Initial Response: Within 48 hours
• Triage: Within 5 business days
• Resolution: Typically within 30-90 days depending on severity

• gosec via golangci-lint runs on all pull requests to catch common Go security issues.

• Dependabot monitors Go module dependencies and creates pull requests for security updates automatically.

• All changes require peer review before merging to main.

This adapter interacts with the Omnia Management API. Follow these practices:

• Never commit API tokens to version control.
• Use the OMNIA_API_TOKEN environment variable rather than the api_token config field where possible.
• Apply the principle of least privilege when creating API tokens.
• Rotate tokens regularly.

• All configuration inputs are validated before use. Ensure configuration files are sourced from trusted locations.

• Security Advisories: GitHub Security Advisories
• Security Contact: security@altairalabs.ai
• Parent Project: This adapter is part of the PromptKit ecosystem.

Last Updated: March 18, 2026

For questions about this security policy, contact: security@altairalabs.ai