The latest patch versions of v1 and v2 releases of this project are supported for security updates.

This security policy only applies to the latest patches of the following PHP versions.

If you have found any issues that might have security implications in the versions supported, please send a report privately to [email protected]. Do not report security reports publicly.

If you use this GitHub Action through a Tidelift subscription, please refer to https://tidelift.com/security.