Please report a security problem privately — never in a public issue:
- by email: [email protected];
- or through GitHub's private vulnerability reporting.
Say what you saw, how to repeat it, and the version (gcal --version). Never send a token, a password, a session or
anyone's private content.
What gcal keeps on your computer: the shared security page and
docs/security.md.
Security audits of gcal follow the shared
security method in cli-testing.