If you discover a security vulnerability in any redhat-actions project, please report it responsibly.

Do not open a public GitHub issue for security vulnerabilities.

Instead, please use GitHub's private vulnerability reporting to submit your report directly in the affected repository. Navigate to the Security tab of the repository and click Report a vulnerability.

Please include:

• A description of the vulnerability
• Steps to reproduce the issue
• Any potential impact
• Suggested fix (if you have one)

We will acknowledge receipt of your report and work with you to understand and address the issue.