Do not open a public issue for credentials, tokens, private keys or another potentially sensitive value. Report it privately through GitHub Security Advisories for this repository.

Include the affected path, build GUID and a minimal reproduction. Do not include the sensitive value when a hash is sufficient. The private extraction infrastructure quarantines suspicious output and keeps quarantine files outside Git tracking.