This repository distributes:

• Docker-based Java development tooling
• project templates
• OpenCode/oh-my-openagent configuration and skills

Security reports are accepted for all repository content and published container images.

Please do not open public issues for potential vulnerabilities.

Use one of these private channels:

1. GitHub Security Advisories (preferred)
2. Maintainer contact via repository owner profile

Include:

• affected file(s), image tag(s), or workflow(s)
• reproduction steps
• impact assessment
• suggested remediation if available

• Initial acknowledgment: within 5 business days
• Triage decision: within 10 business days
• Remediation timeline: communicated after triage

Please allow time for validation and remediation before public disclosure.