Please do not report security vulnerabilities through public GitHub issues.

Use GitHub's private vulnerability reporting:

1. Go to the Security tab of the affected repository
2. Click Report a vulnerability
3. Fill in the details — include reproduction steps, impact assessment, and any suggested fix

Alternatively, email [email protected] for coordinated disclosure.

• Description of the vulnerability and affected component
• Steps to reproduce (proof-of-concept if applicable)
• Potential impact
• Any suggested mitigation or fix

We follow responsible disclosure principles. We will credit reporters in release notes unless you prefer to remain anonymous.

These projects implement controls aligned with the ASD Essential Eight and follow OWASP secure development guidelines. CI pipelines run automated SAST, dependency auditing, and secrets scanning on every pull request.