Report security-sensitive issues privately through GitHub's security-advisory flow for this repository when available.

RepoCover reads local repository files and may invoke existing local renderers. It must not upload assets, change GitHub settings, install dependencies, or publish content without explicit authorization.