Security Policy Reporting a Vulnerability Don't open up an issue for security vulnerabilities. We need to test out how to use GitHub for private disclosures.