# Security

## Initial Push

No external credentials are required.

## Future Requirements

- Limit parser resource usage per job
- Validate artifact URIs before reading source snapshots
- Avoid executing untrusted repository code