Scrub is a Mac utility that can inspect and remove local files, so security reports are taken seriously.
Security fixes are handled on the default branch first. Public releases should be updated from the latest tagged or published build.
Please do not open a public issue for a vulnerability or for a report that includes private paths, credentials, tokens, or personal data.
Use GitHub's private vulnerability reporting or contact the maintainer through the SyntaxFear GitHub profile. Include:
- What you found
- Steps to reproduce it
- The macOS version and Scrub version
- Any logs or screenshots with personal data removed
The maintainer will confirm receipt, investigate, and coordinate a fix before public disclosure.