Only the latest release is supported — please update before reporting an issue.

Please do not open a public issue for security vulnerabilities.

Instead, report privately via GitHub's private vulnerability reporting.

I will do my best to acknowledge reports within 2 weeks and aim to release a fix or mitigation within 6 weeks for confirmed issues; timelines are best-effort.

tctest handles GitHub and TeamCity API tokens supplied via flags, environment variables, or .tctest config files. Issues involving token leakage (e.g. tokens appearing in logs, output, or error messages) are particularly relevant.