If you find a security issue in this repository, please open a private security advisory if available, or contact the maintainer directly.

Please include:

• affected file or workflow;
• reproduction steps;
• expected impact;
• suggested fix if you have one.

This project is primarily workflow documentation. Security issues usually fall into these categories:

• unsafe shell commands in examples;
• instructions that encourage leaking secrets;
• review rules that miss obvious security risks;
• adapter guidance that grants unnecessary permissions.

如果你发现安全问题，请优先使用 GitHub 的私有安全报告功能，或直接联系维护者。

请提供受影响文件、复现步骤、影响范围和建议修复方案。