Report a security problem privately to security@learnsome.tech. The site's security policy is at https://learnsome.tech/.well-known/security.txt.

Please do not open a public issue for a vulnerability. Tell us what you found, how to reproduce it and what it affects; we will reply and keep you informed until it is fixed.

In scope: this repository's code (./check and .learnsome/, the dev container, the workflows) and the LearnSome.tech site and lab sandbox. Some lab files contain credentials, tokens or keys on purpose, to teach how to handle them: they are made up and grant access to nothing. A real secret in this repository is a vulnerability; please report it.