This is a public portfolio repository for the LeadMaster SaaS project. It documents product capabilities, architecture, engineering decisions, and case study materials. It is not a production deployment and does not contain live credentials, source code, or operational systems.
Portfolio notice: This repository is a portfolio and case-study representation of the product. Source code, infrastructure, credentials, workflows, prompts, and proprietary implementation details are intentionally excluded.
Security in this context means:
- Protecting proprietary implementation assets that are intentionally kept private
- Preventing accidental exposure of credentials or customer data in portfolio materials
- Providing a clear process for reporting legitimate security concerns
| Version | Supported |
|---|---|
Portfolio documentation (latest on main) |
✅ Actively maintained |
| Production deployment at outreach.ahmedhussain.tech | ❌ Not hosted in this repository |
Never commit the following to this repository:
- API keys, tokens, or secrets
.envfiles or environment configuration with real values- Webhook URLs containing authentication tokens
- Google OAuth client secrets or service account JSON
- Supabase keys or connection strings
- Production n8n workflow exports with embedded credentials
- Proprietary prompts or AI system instructions
- Customer, lead, or campaign data
- Real production dashboard screenshots without sanitization
If credentials are accidentally committed:
- Revoke and rotate the exposed credential immediately
- Remove the secret from git history if possible
- Report via the process below so the maintainer is aware
The following assets are proprietary and intentionally excluded from this repository:
| Asset | Status |
|---|---|
| Production source code (frontend + backend) | Private |
| Production n8n workflows and AI prompts | Private |
| Database schemas and migration scripts | Private |
| Gmail OAuth configuration and token storage | Private |
| Webhook endpoints and internal API routes | Private |
| Lead processing and personalization business logic | Private |
Portfolio documentation describes patterns and architecture — not implementation internals. Do not request or submit these materials via issues or pull requests.
If you discover a security issue related to this repository — including accidentally exposed credentials in commits, issues, or pull requests — please report it responsibly.
- Do not open a public GitHub issue for security-sensitive findings
- Email the maintainer directly at: mariabano.official@gmail.com
- Include:
- Description of the issue
- Steps to reproduce (if applicable)
- Affected files or commits
- Your recommended remediation (if known)
| Timeline | Action |
|---|---|
| Within 48 hours | Acknowledgment of your report |
| Within 7 days | Initial assessment and response |
| After resolution | Confirmation and coordinated disclosure if applicable |
In scope:
- Credentials or secrets committed to this repository
- Customer or PII data accidentally published in portfolio materials
- Security misconfigurations in publicly committed files
Out of scope:
- Vulnerabilities in third-party platforms (Supabase, Google, n8n, OpenAI) — report to those vendors directly
- Social engineering or physical security
- Proprietary production systems not hosted in this repository
Before submitting documentation changes:
- No real API keys, tokens, or webhook URLs in text or images
- Screenshots are sanitized per docs/demo-checklist.md
- No n8n workflow JSON files committed
- No proprietary prompts or business logic included
- No real lead or customer data in examples
See CONTRIBUTING.md for contribution guidelines.
Security reports: mariabano.official@gmail.com
General inquiries: See README.md