cloud-logs-mcp

The project demonstrates a very strong commitment to security with extensive documentation (`SECURITY.md`), including best practices for API key management (no hardcoding, rotation, least privilege), TLS enforcement, network isolation, data protection, and runtime security (non-root users, container security, resource limits, rate limiting). It integrates multiple SAST tools (Gosec, govulncheck, Trivy, Semgrep) in CI/CD and uses pre-commit hooks for secrets detection and code quality. Session management includes robust user ID hashing and path traversal prevention. A minor point is the `install.sh` script lacking explicit checksum verification for downloaded binaries, though release artifacts are cryptographically signed.