Skip to content

Security: huzjie/memoria

Security

SECURITY.md

Security Policy

Reporting a Vulnerability

Please report security issues privately. Do not open a public issue.

Supported Versions

Version Supported
0.1.x Yes

Security Considerations

  • Never commit API keys. All LLM provider keys are read from environment variables (OPENAI_API_KEY, ANTHROPIC_API_KEY, GEMINI_API_KEY).
  • The config.yaml should not contain secrets; use environment variables instead.
  • The default provider is mock (offline, deterministic) — no network or keys required.
  • Audit logs are append-only JSONL; rotate them for long-running deployments.

There aren't any published security advisories