Private channel for reporting a security issue

Hello maintainers,

I found a potential security issue affecting GitHub Actions workflows in this repository.

I do not want to disclose technical details publicly before maintainers have reviewed them. Could you please enable GitHub private vulnerability reporting or provide an alternative private security contact email?

I can provide a detailed report including the affected workflow paths, current commit, impact assessment, non-destructive validation steps, and suggested remediation.

Review the repository's GitHub Actions security-reporting options and determine whether GitHub private vulnerability reporting can be enabled; otherwise identify a private security contact route. No specific files or tests are named. The issue is complete when the reporter has a private channel for submitting the affected workflow paths, commit, impact assessment, validation steps, and remediation details.

Written by the indexing model from the issue text.