Security fixes are released for the latest published version of the Piloterr CLI.
Please do not report security vulnerabilities through public GitHub issues.
Email contact@piloterr.com with a description of the issue, the affected version, and steps to reproduce. We acknowledge reports within three business days and keep you informed until the issue is resolved.
- Keep your Piloterr API key out of source control. Load it from the
PILOTERR_API_KEYenvironment variable or a secret manager. - Rotate the key from the Piloterr dashboard if you believe it was exposed.