Reporting a Vulnerability Open a public issue, we'll resolve it together. There is no bug bounty, only Zuul.