Security

Report suspected vulnerabilities by private email or a private GitHub advisory. Do not open a public issue for a security report.

gum is privileged local software. It runs with the permissions of the local user, reads configured credential stores, calls Google APIs, starts plugin subprocesses, and serves MCP tools over stdio to an agent client.

Default posture

Public builds use operator-registered credentials: BYO Google Desktop OAuth,

API key, service-account key, or ADC.

Write and destructive operations go through explicit command gates.
MCP uses stdio. gum does not open an MCP network listener.
Plugin subprocesses are user-level code. macOS and Linux confinement is

enforced where the platform backend is available; unsupported platforms fail closed for plugin spawn.

Secrets are configured through gum auth commands, not normal operation

arguments.

Local checks

bash

cd apps/gum
go test -race -count=1 ./...
go vet ./...
goreleaser check

The vulnerability gate runs from the repository root:

bash

go install golang.org/x/vuln/cmd/govulncheck@v1.3.0
make vulncheck

make vulncheck fails on any advisory whose vulnerable code the build reaches. An advisory that covers only import paths gum never compiles also fails the gate unless scripts/govulncheck-allowlist.json records it with the module and the reason the requirement stays, and a recorded advisory the scan no longer reports fails too.

The repository security policy remains the source of truth: SECURITY.md.