Security Policy Reporting a Vulnerability Use GitHub's built-in security reporting under the Security and quality tab