Skip to content

Security: cleargeo/CVG-Rainfall-Wizard

Security

SECURITY.md

Security Policy — CVG Rainfall Wizard

Proprietary Software | © Clearview Geographic LLC


Supported Versions

Version Supported
1.0.x ✅ Active
< 1.0 ❌ Not supported

Reporting a Vulnerability

Do not open public GitHub issues for security vulnerabilities.

Report directly to:


Security Practices

  • No API keys are required (NOAA PFDS is a public unauthenticated API)
  • All NOAA API calls use HTTPS
  • Docker containers run as non-root user (rfwiz, UID 1001)
  • No user-supplied input is executed as shell commands
  • PFDS response data is validated before use

Dependency Scanning

pip install pip-audit
pip-audit --requirement requirements-lock.txt

© Clearview Geographic LLC — All Rights Reserved

There aren't any published security advisories