Do not open an issue, pull request, discussion, or commit containing passwords, API keys, tokens, payment information, customer data, private keys, or other sensitive material. Git history is durable; deleting a file later does not reliably remove a secret.
If a secret was committed, revoke it immediately at the issuing provider, then remove it from history using an established repository-cleanup procedure.
For a repository vulnerability, use a private security channel controlled by the repository owner. Do not publish exploitable details until the owner has had a reasonable opportunity to respond.
This project does not provide incident response, legal advice, or provider support.