swift-lilypond.git · SECURITY.md

revision 0900dc846f23d4f7e7d4a389615fc6aa793114bf · complete file

# SECURITY

## Reporting a Vulnerability
Please email security concerns to the maintainers listed in `AGENTS.md`. Provide steps to reproduce and affected versions.

## Supply Chain & Provenance
- Build LilyPond **only** from official GitLab tags.
- Verify artifacts by checksum before publishing.
- CI uses pinned toolchains and reproducible build scripts.

## Supported Versions
We generally support the latest minor line and the immediately previous one.