Please report vulnerabilities privately through GitHub: Security → Report a vulnerability on this repository. Do not open a public issue.
Supported versions: the latest v1.x.y release.
How the action handles credentials and data is described in docs/security.md.