Use GitHub private vulnerability reporting. Do not publish exploit details, credentials, private data, or unredacted security logs in issues.

These are solo-maintainer repositories. Security decisions are enforced through automated checks and evidence, without requiring a second human approver.