Email: hugues@linux.com (or use GitHub Security Advisory)
Scope: This action only (not Q CLI)
Response: 48 hours acknowledgment, 7-14 days fix
| Version | Supported |
|---|---|
| v1.x | ✅ |
| < v1.0 | ❌ |
- Q CLI bugs → https://github.com/aws/amazon-q-developer-cli/security
- Workflow security → See examples/