Open a private security advisory if the feature is available, or contact the maintainer directly if you need to avoid public disclosure while GitHub-side security features are being finalized.
- CodeQL
- Dependabot version updates
- Detect-secrets in pre-commit
pip-auditin local and CI quality gatesbanditfor Python security checks