swift-lilypond.git · SECURITY.md

revision b105b4e3f1f16f654b3b994ebbccd81db24134d0 · complete file

# SECURITY

## Reporting a Vulnerability
Please email security concerns to the maintainers listed in `AGENTS.md`. Provide steps to reproduce and affected versions.

## Supply Chain & Provenance
- Build LilyPond **only** from official GitLab tags.
- Verify artifacts by checksum before publishing.
- CI uses pinned toolchains and reproducible build scripts.

## Supported Versions
We generally support the latest minor line and the immediately previous one.