Skip to content

Security: Pouya-Mansournia/Piezo-Controller

Security

SECURITY.md

Security Policy

Supported Versions

No formal release series exists yet. Security and safety reports should target the current master branch unless release tags are added later.

Reporting a Vulnerability

Please open a GitHub issue for documentation, dependency, or non-sensitive security concerns. For issues that could create unsafe hardware behavior, avoid posting exploit-like command sequences publicly until a maintainer has had time to assess the impact.

Security Boundaries

The current firmware is designed for trusted lab or development networks:

  • TCP control is unauthenticated.
  • Traffic is not encrypted.
  • The controller uses a static IPv4 configuration.
  • Command frames can affect DAC outputs and relay states.
  • High-voltage operation requires external lab safety controls and validation.

Do not expose the controller to the public internet or an untrusted network.

Secrets

The repository does not require runtime secrets. Do not commit private credentials, VPN details, lab network passwords, or proprietary calibration data.

There aren't any published security advisories