Only the latest released version of Sidequest is supported with security fixes. Development branches, unreleased commits, and local builds are not supported release versions.

Please use GitHub private vulnerability reporting for this repository. Do not open a public issue for an undisclosed vulnerability.

Include the affected version, impact, reproduction steps, and any relevant logs with secrets redacted. If private vulnerability reporting is unavailable, contact WBT112 through GitHub and request a private advisory channel.

The supported security scope includes the Sidequest CLI, installer, GitHub Actions workflows, release configuration, packages, and published release artifacts.