Do not open a public issue containing credentials, tokens or authentication files.

Report security issues privately through GitHub's security advisory feature. Include reproduction steps and affected versions, but redact all secrets.

CodexSwitch reads existing Codex and OpenCode authentication files locally. It never requires credentials to be copied into the repository or configuration committed to Git.