If you discover a security vulnerability in gitleaks, please report it responsibly:

1. Do not open a public issue.
2. Use GitHub's private vulnerability reporting to submit your report directly.
3. Include a description of the vulnerability, steps to reproduce, and any relevant logs or screenshots.

This policy covers gitleaks (this repository). For vulnerabilities in gitleaks-action, please report them at gitleaks/gitleaks-action.