Use GitHub Issues for reproducible bugs, documentation problems, and focused feature requests. Include the Shopify Scope Guard version, command or Action configuration, Node.js/npm and operating system versions, a minimal sanitised reproduction, and expected and actual behaviour. For scope reports include the configured scopes, selected Admin GraphQL API version, and supported operation or webhook surface.
Remove credentials, tokens, merchant/customer data, private source, private URLs, and production secrets. Do not post suspected vulnerabilities publicly; follow SECURITY.md for private reporting.