If you discover a security issue in this repository, report it privately to the repository owner before public disclosure.

This repository mainly contains documentation and workflow guidance, but dependency or CI issues should still be reported responsibly.