Do not open a public issue containing API keys, access tokens, customer data, private endpoint URLs, or an unpatched vulnerability.

For a vulnerability in repository code, use the repository's Security tab and select Report a vulnerability when private vulnerability reporting is available. If it is not available, open a public issue containing only a high-level description and request a private contact channel.

For APIMART account, billing, or service incidents, use the support channel linked from the official APIMART website or documentation. Repository maintainers cannot resolve account-specific requests through GitHub issues.

Rotate any credential that may have been pasted into an issue, commit, action log, or chat—even if it was later deleted.