Please report security issues to security@tritondatacenter.com, not in a public issue or pull request.
That covers anything in this repository: the published index (for
example a digest, checksum source or download location that is wrong or
points somewhere it should not), the generator and its vendor resolvers,
and the cloud-image client, including install.sh and self-update.
Problems in a vendor's own images or checksum files belong with that vendor; tell us too if the index helps spread them.
A useful report says what is affected (a release, a file under v1/, a
cloud-image version), how to reproduce it, and what you expected.