Skip to main content

​
Get help

Check Troubleshooting, Known limitations, and the FAQ first. They cover the most common problems.

​
Report a bug

A report that includes these details is easier to reproduce:
  • The version from molesignal --version, and the commit from GET /api/v1/version.
  • The deployment type: Docker Compose, binary, or Kubernetes, and the roles that run.
  • The relevant part of the configuration, with secrets removed.
  • The log lines around the failure.
  • The steps that trigger the problem, the expected result, and the actual result.
Never paste tokens, passwords, MS_CIPHER_KEY, or database connection strings into a public issue.

​
Report a security vulnerability

Do not open a public issue for a vulnerability. Use one of the private channels: Include a short description of the impact, a minimal reproduction, the version or commit that was tested, and a suggested severity. The maintainers acknowledge a report within 3 business days and triage it within 7 business days. A fix or a mitigation plan for a high or critical issue follows within 30 days. Disclosure is coordinated, and reporters are credited in the release notes unless they ask to stay anonymous. While MoleSignal is pre-1.0, security fixes go to the main branch and the latest tagged release. The alpha and beta channels receive forward fixes only.

​
Contribute

MoleSignal is open source under the Apache License 2.0. The source, the contribution guide, and the issue tracker are in the GitHub repository.
Last modified on October 9, 2026