Do not report vulnerabilities or real sensitive data in public issues. Use GitHub private vulnerability reporting when available and provide a minimal synthetic reproduction.