Report vulnerabilities through GitHub private vulnerability reporting. Do not open public vulnerability issues. Provider automation cannot promote mathematical claims.