Use GitHub's private vulnerability reporting for this repository when the Report a vulnerability option is available. Do not open a public issue for a suspected security vulnerability.

Include a clear description, the affected documentation or tooling, steps to reproduce, and any known impact. Do not include secrets, customer data, or exploit details that would create additional risk in a public channel.

This repository contains public documentation and its preview/build tooling. Reports about the Bifrost application itself should go to the security reporting channel for that application, not to this documentation repository.