Report a vulnerability to security@pinecall.io. Say which package, door or unit is affected, how to reproduce it against a box of your own (never against pinecall.io), and whether it exposes a tenant's data. You get an answer within three working days and a fix or a plan within thirty.
Supported: the latest release tag, every package at its version. The runtime's own secrets are
drawn into Secret Manager and read into the pods by External Secrets, and every tenant secret in
the database is sealed under PINECALL_VAULT_KEY; runtime/docs/the-environment.md says which
variable holds what.