Security Policy

Blackthorn Field Notes is a public GitHub Pages repository for a static Jekyll site.

Reporting a Security Issue

If you find a security issue, please do not open a public issue that includes sensitive details.

Instead, contact C. J. Blackthorn through the public contact/support channels listed on the site, or open a GitHub issue with a general note that a private security concern exists and should be discussed privately.

Sensitive Information

This repository should never contain:

API keys
Stripe secret keys
GitHub tokens
OAuth secrets
Private keys or certificates
.env files
Private personal information

Anything committed to this repository should be treated as public.

Scope

This site is a static publishing site. Security concerns may include exposed secrets, malicious injected scripts, compromised links, unsafe third-party embeds, or unauthorized repository changes.