Skip to content

Security: karolswdev/delivery-workbench

Security

SECURITY.md

Security And Privacy

Delivery Workbench is local developer tooling. It installs Git hooks and can optionally capture staged diffs into a local daily work log.

Work logging is off by default. When enabled, a log entry is only created if the per-commit contract contains explicit work-log consent:

**Work-log consent:** yes

Use PMO_WORK_LOG_EXCLUDE_REGEX to mechanically omit sensitive or noisy staged paths from work-log payloads. This is a practical guardrail, not a security boundary. Do not consent to logging material that should not be retained.

Do not publish generated work logs unless you have reviewed them for secrets, customer data, credentials, and private implementation details.

There aren't any published security advisories