Please do not report suspected security issues in public GitHub issues.

If GitHub private vulnerability reporting is enabled for this repository, use that channel first. Otherwise, contact the maintainers through an official private support channel before disclosing details publicly.

When reporting a vulnerability, include:

• a short description of the issue
• the affected file or workflow
• reproduction steps or proof of concept
• impact assessment, if known

We will review reports privately and coordinate remediation and disclosure timing where appropriate.