The Task team takes security seriously and we thank our community for disclosing issues responsibly. To report security issues, please use GitHub's built-in Private Vulnerability Reporting or send an email to task@taskfile.dev. Please include as much detail as possible in your report.

A member of the team will investigate as soon as possible and we will keep you updated throughout the process.

You can read more about how we handle security-related issues in our Incident Response Plan and Threat Model.