Pipeline Services is currently in an early public-release phase.

Please do not open a public GitHub issue for security-sensitive reports.

Preferred path:

1. Use GitHub's private vulnerability reporting flow for this repository, if enabled.
2. If private reporting is not enabled yet, contact the maintainer directly using the contact information listed on the maintainer's GitHub profile.

Please include:

• affected component(s)
• reproduction steps or proof of concept
• impact assessment
• any suggested remediation

The goal is to acknowledge reports promptly and coordinate a responsible disclosure.