Hi — I've done an unsolicited review of this repo's CI configuration and have a small set of findings I'd like to
share privately rather than in a public issue, since some of them are exploitable as-is.
Could you either:
- Enable GitHub's private vulnerability reporting for this repo (
Settings → Code security and analysis → Private vulnerability reporting → Enable), or
- Share a security contact (email / Signal / etc.) I can send the writeup to?
Hi — I've done an unsolicited review of this repo's CI configuration and have a small set of findings I'd like to
share privately rather than in a public issue, since some of them are exploitable as-is.
Could you either:
Settings → Code security and analysis → Private vulnerability reporting → Enable), or