Please report security issues privately via GitHub's private vulnerability reporting on this repository's Security tab ("Report a vulnerability"). Do not open a public issue for security problems.

We will acknowledge your report and keep you updated on remediation.

This module is pre-1.0; only the latest minor release receives fixes.

orgkit never decrypts secrets. Callers pass already-decrypted values via the secrets input; decryption is a consumer concern. Do not commit plaintext secrets to configurations that use this module — pass them from a secure source at apply time.