Skip to content

Security: Marcsgarden/cloud-ai-benchmarking

Security

SECURITY.md

Security Policy

Supported Scope

This repository is a research and portfolio project for reproducible AI workload benchmarking. Security review focuses on repository hygiene, credential handling, Docker usage, and safe publication practices.

Do Not Commit

  • Cloud provider credentials.
  • Hugging Face tokens.
  • .env files.
  • SSH keys or certificates.
  • Downloaded model weights.
  • Dataset archives.
  • Local machine paths or private metadata.

Reporting A Concern

If you find a security issue, open a private report through GitHub Security Advisories after the repository is published, or contact the repository owner directly.

Please include:

  • affected file or command;
  • potential impact;
  • reproduction steps if applicable;
  • recommended fix if known.

Docker Notes

Dockerfiles in this repository are intended for benchmark reproducibility, not hardened production deployment. Review base images, dependency versions, and runtime privileges before using them outside the benchmark context.

There aren't any published security advisories