swift-lilypond.git · SECURITY.md

revision db410ce7dc2231b74fb6b4737ea26ecc87ad25f6 · complete file

# SECURITY

## Reporting a Vulnerability
Please email security concerns to the maintainers listed in `AGENTS.md`. Provide steps to reproduce and affected versions.

## Supply Chain & Provenance
- Build LilyPond **only** from official GitLab tags.
- Verify artifacts by checksum before publishing.
- CI uses pinned toolchains and reproducible build scripts.

## Supported Versions
We generally support the latest minor line and the immediately previous one.