If you discover a security issue that affects this repository, please use GitHub's private vulnerability reporting flow when available.
If private reporting is not available, open an issue only for non-sensitive problems that do not require embargoed handling.
When reporting an issue, include:
- A short description of the problem and affected files or workflow paths.
- Reproduction steps or proof of impact.
- Any suggested remediation or hardening guidance.
Please avoid publishing secrets, exploit code, or other sensitive details in a public issue.