Security fixes are applied to the latest released version of this action.

Please report suspected vulnerabilities through GitHub's private vulnerability reporting flow:

https://github.com/jaxxstorm/action-install-gh-release/security/advisories/new

If private reporting is unavailable, open a GitHub issue only for non-sensitive security hardening discussions. Do not include exploit details, secrets, or proof-of-concept payloads in public reports.

When reporting an issue, include:

• A description of the impact.
• Clear reproduction steps.
• The affected action version or commit.
• Any relevant logs or screenshots with secrets redacted.

I will acknowledge valid reports as quickly as possible and coordinate a fix and disclosure.