Please report suspected vulnerabilities through GitHub private vulnerability reporting, rather than public issues or pull requests.

To help us assess your report, please include:

• The affected version and relevant configuration.
• Reproduction steps or a minimal proof of concept.
• The potential impact and any access or conditions needed to trigger the issue.

If you used an automated scanner, please verify its findings and include the reproduction details above. This helps us understand how the reported behavior affects the operator in practice.

For proposals to add security tools or CI integrations, please see the contribution guidelines.