CI Lab is a demo application with no security guarantees and not intended for flight deployment. Any issues found in this repository should be submitted as a bug report instead of vulnerability. Please use the "Bug Report" template and provide as much information as possible. Apply appropriate labels for each report.

Any report that relies on the unauthenticated nature of commands sent through CI Lab will be given low priority due to this being intended and expected behavior of CI Lab. Flight projects are responsible for ensuring that the environment and commands are secure. The cFS Gov bundle is intended to provide a mission-ready version of cFS.

Please refer to the cFS Security Policy for information on:

• Reporting security vulnerabilities through NASA's Vulnerability Disclosure Program (VDP)
• Security testing practices
• Additional support resources