If you find a security issue in shared defaults or templates under .github/, please report it through GitHub Security Advisories.

For issues in projects, follow that repository's security policy instead.