Use GitHub's private security advisory interface for vulnerabilities or credential exposure. Do not open a public issue for security-sensitive reports.

Build credentials must be supplied at runtime. The repository intentionally contains no default passwords, private keys, signing material, firmware dumps, password databases, or generated system images.