Only the latest release of the current major tag (v1) of github-workflows is supported. The repositories that call these workflows pin the major tag, so a fix reaches them with the next release.

Please do not report security vulnerabilities through public GitHub issues.

Instead, report them privately through GitHub's private vulnerability reporting:

1. Open the Security tab of this repository.
2. Click Report a vulnerability.

You can expect an initial response as soon as possible. Once confirmed, the issue will be fixed in the latest release and a security advisory will be published.