Only the latest commit on main is supported. Fixes are not backported.
Please do not open a public issue for security problems.
Report privately through GitHub: open the repository's Security tab and choose Report a vulnerability (https://github.com/effecet/ci-workflows/security/advisories/new).
Include what you found, how to reproduce it, and the impact you expect. You should get a first response within a week. Once a fix ships, the advisory is published with credit to the reporter unless you prefer to stay anonymous.
This is a personal open-source project maintained on a best-effort basis. Never commit real credentials while reproducing an issue; use placeholders.