This repository is a template for new repositories. It ships no software for use: it holds documentation, configuration, a pre-commit hook and workflows, which every repository created from it inherits. Only the current state of the default branch is maintained; there are no versions.

• A secret, a credential or personal data committed to this repository by mistake, in a file or in the history.
• A weakness of the workflows under .github/ or of the hook under .githooks/ that could let someone change what this repository, or a repository created from it, runs or publishes.
• An action pinned here at a version with a published vulnerability.

Use GitHub's private vulnerability reporting (the tab Security, then Report a vulnerability), or write to info@mtorun0x7cd.com, naming the file, the problem and how to see it. Do not open a public issue for it.

The placeholders in the template files are not values. A placeholder that has the form of a credential, such as <api-token>, is documented as one in .gitleaks.toml. A weakness of an action itself belongs to the repository of that action.

Reports are read. A reply or a fix is not guaranteed.