Security fixes are handled for the latest release and the default branch.
| Version | Supported |
|---|---|
| Latest release | Yes |
| Default branch | Best effort |
| Older releases | No |
Please do not open a public issue with exploit details or proof-of-concept code for suspected vulnerabilities.
Use GitHub private vulnerability reporting for this repository when it is available. If it is not available, open a minimal public issue asking for a private disclosure channel, but do not include technical details until a private channel is available.
Please include:
- The affected version or commit.
- The affected component (CLI, config parsing, GitHub API integration, shell shim, etc.).
- Reproduction steps or a minimal proof of concept.
- The expected impact.
- Relevant OS and environment details.
The maintainer will acknowledge valid reports as soon as practical and will coordinate a fix, release, or advisory when needed.