Use GitHub Private Vulnerability Reporting at https://github.com/bext-stack/automonique/security/advisories/new. Response, embargo, disclosure, and supported-version terms will be published before the first product release.

Do not report vulnerabilities in public issues. Never include credentials, customer data, production identifiers, or exploit data that affects third parties in a repository artifact.