If you find any bug with Renovate that may be a security problem, please report it through the GitHub Security Advisories process. This way we can evaluate the bug and hopefully fix it before it gets abused. Please give us enough time to investigate the bug before you report it anywhere else.
If you would like to discuss a potential finding before raising the Advisory, then e-mail us at: renovate-disclosure@mend.io.
Caution
Review the Mend Developer Platform Terms of Service before attempting to reproduce any issues with the Mend Renovate CLI on Mend-hosted infrastructure.
You may not legally be allowed to reproduce the security issue without advance, express written consent.
Please do not create GitHub issues for security-related doubts or problems.