Private channel for reporting a security issue

Hello maintainers,

I found a potential security issue affecting a GitHub Actions workflow in this repository.

I do not want to disclose technical details publicly before maintainers have reviewed it. Could you please provide a private channel for reporting this issue, such as GitHub private vulnerability reporting or a maintainer email address?

I can provide a detailed report including the affected workflow path, current commit, impact assessment, non-destructive maintainer-side validation steps, and suggested remediation.