Please do not report vulnerabilities, exposed secrets, credentials, or private user data in public issues.
Use GitHub private vulnerability reporting when it is available for this repository. If it is not available, contact the repository owner through the profile contact channel.
If a secret is exposed, revoke or rotate it first, then remove it from Git history and close the related GitHub secret scanning alert only after verification.