swift-lilypond.git · SECURITY.md

revision 5b8ce3ef03e856657a82d51b60276632fdc8a298 · complete file

# SECURITY

## Reporting a Vulnerability
Please email security concerns to the maintainers listed in `AGENTS.md`. Provide steps to reproduce and affected versions.

## Supply Chain & Provenance
- Build LilyPond **only** from official GitLab tags.
- Verify artifacts by checksum before publishing.
- CI uses pinned toolchains and reproducible build scripts.

## Supported Versions
We generally support the latest minor line and the immediately previous one.