Report potential vulnerabilities privately through AWS Vulnerability Reporting. Do not post credentials, exploit details or sensitive project content in a public issue.

Include the source commit, affected component, reproduction steps and expected impact. Use synthetic data and redact deployment identifiers from attachments.

EDDIE is sample code for non-production use. Review security controls and deployment settings and costs and cleanup before installation. A successful scan does not establish production suitability or replace an organizational security review.