GitHub Discussions should be used for open-ended community work that is not yet
an actionable issue or pull request.

Recommended Categories

Issue vs Discussion

Use an issue for:

• reproducible bugs
• accepted implementation tasks
• failing checks
• security-independent defect reports
• narrow feature requests with clear acceptance criteria

Use a discussion for:

• policy design questions
• integration recipes
• demos and showcases
• support questions
• brainstorming around future MCP, CEL, SARIF, or sandbox features

Moderation Notes

• Redirect vulnerability reports to SECURITY.md.
• Keep conversations technical and aligned with CODE_OF_CONDUCT.md.
• Convert discussions into issues once the required change is concrete.
• Close or archive threads that become stale and unactionable.