mirror of
https://github.com/This-weiyuqing/mi-fitness-health.git
synced 2026-10-17 18:55:37 +08:00
Aleksej Kubulashvili
df914ea56a
Package the standalone Mi Fitness MCP with clearer public docs, release metadata, CI, and safer local repository hygiene so it is ready to publish without secrets or work identity leakage.
14 lines
488 B
Markdown
14 lines
488 B
Markdown
# Security
|
|
|
|
This project stores credentials in the operating system keychain via `keyring`.
|
|
|
|
## Safe usage
|
|
|
|
- do not commit local config files, databases, or captured payloads
|
|
- avoid pasting `passToken` values into shell history when possible
|
|
- treat leaked `passToken` values as compromised and rotate them
|
|
|
|
## Reporting issues
|
|
|
|
If you find a vulnerability or a secret leak, do not post the secret in a public GitHub issue. Share only the minimum details needed to reproduce the issue.
|