Use GitHub's private vulnerability reporting for a vulnerability in repository tooling, adapters, or CI.

Use the public collection change form for incorrect collection membership, metadata, traits, or links.

Do not include wallet secrets, seed phrases, API credentials, or other private keys in either report.