Do not open public issues containing credentials or private client data.

Report sensitive issues privately to the repository owner.

Release gates scan for common API keys, private keys, OAuth tokens, local home paths, and forbidden ZIP entries.