If you discover a vulnerability in this GitHub Action, please report it using one of the following methods:

1. GitHub Security Advisories: Submit a private report using the GitHub Security Advisories.
2. Email: For sensitive vulnerabilities, contact us at [email protected].
3. Include the following details in your report:
   • Affected GitHub Action version(s) or tags.
   • Steps to reproduce the issue.
   • Description of the potential impact (e.g., token exposure, privilege escalation).

We aim to respond within 48 hours and resolve the issue as quickly as possible.

To ensure the safe use of this GitHub Action:

1. Use the least privilege principle:
   • Configure GITHUB_TOKEN or other secrets with the minimal required permissions.
   • Use a personal access token (PAT) only if strictly necessary.
2. Pin your GitHub Action to a specific version or tag:

   uses: dabao1955/kernel_build_action@v1