# Security Policy

## Supported versions

Security fixes are provided for the latest 0.1.x release.

## Reporting a vulnerability

Please do not disclose vulnerabilities in a public issue. Use GitHub's **Security** tab and **Report a vulnerability** to open a private advisory for this repository. If private reporting is unavailable, open a public issue containing no sensitive details and ask the maintainer for a private contact channel.

Include the affected version, Harness version, reproduction steps, impact, and any suggested mitigation. Do not include API keys, session data, generated-image contents, or other user data.