Skip to content

Vulnerability Disclosure Policy

Supported Versions

We actively maintain and support the latest release on the main branch.

Version / Branch Supported
main ✅
Old tags ❌

🔒 Reporting a Vulnerability

If you discover a potential security vulnerability in any reusable workflow or composite action within this repository, please do not open a public issue.

Instead, please report vulnerabilities privately via: - GitHub Private Vulnerability Reporting (preferred method on the repository page). - Direct contact with repository maintainers.

We review security reports promptly and appreciate your assistance in keeping downstream software supply chains safe.