Security

No credentials live in this repository; provider settings come from environment variables (.env.example is a template).
The scanner in openai_migration_check.py reads local files only and never uploads source code.
Never commit an API key. A key pasted into an issue, a log or a screenshot should be rotated immediately.
Retried requests must reuse an Idempotency-Key, otherwise a timeout can bill the same generation twice.
Report a leaked key or a security problem privately to the maintainer rather than in a public issue.

Navigation Menu