Security reports should not be filed as public issues. Use GitHub's private security-advisory reporting for MLgentDev/tsqlscope and include the affected version, platform, reproduction steps, and impact. Do not include credentials, proprietary SQL, or other sensitive data in a report.

Version 0.1 receives security fixes while it is the latest minor release. Release assets are unsigned; verify SHA256SUMS and the GitHub provenance attestation before overriding a platform trust prompt.