SECURITY.md

# Security

Security fixes target the current main branch. Older revisions are not
maintained separately.

Report suspected vulnerabilities privately through
[GitHub security advisories](https://github.com/conorbronsdon/ssot-check/security/advisories/new).
If private reporting is unavailable, open an issue requesting a private contact
without including credentials, exploit details, or private repository content.

Include the affected revision, reproduction steps, and expected impact. Use
synthetic data. Never include real tokens or recordings of private sessions.