Please do not open a public issue for a suspected vulnerability.

Report security issues privately through GitHub's Security → Report a vulnerability flow for this repository. Include the affected version, impact, reproduction steps, and any suggested mitigation. Do not include real private knowledge or credentials in the report.

Only the latest release receives security fixes during the initial v1 period. Published releases and container images include build provenance; the installer verifies both the release checksum and GitHub artifact attestation.