Do not open a public issue containing a bot token, Reddit secret, administrator ID, private channel link, runtime state, traffic database, log, or downloaded media. Revoke an exposed bot token through BotFather and rotate exposed Reddit credentials immediately.
Report security problems privately through GitHub's security advisory feature.