If you find a security issue in shared defaults or templates under .github/ or .devcontainer/, please report it through GitHub Security Advisories.

For issues in projects, follow that repository's security policy instead.