Use GitHub private vulnerability reporting. Do not disclose credentials, exploit details, or sensitive deployment information in a public issue.

Until Fortplane publishes tagged releases, only the current main branch is maintained. Cluster deployments must pin images and packages, validate their provenance, and test recovery procedures in their own environment.