Only the latest commit on main is supported.

Use GitHub's private vulnerability reporting to report a secret, private data, unsafe link, or other security concern. Do not open a public issue.

Include the affected file, commit, observed risk, and enough evidence to reproduce the problem safely. Do not access data or systems beyond what is necessary to confirm the report.