Please report vulnerabilities through GitHub private vulnerability reporting: https://github.com/tryswift/setup-swift/security/advisories/new

Do not open public issues for security problems. This action downloads and installs toolchains, so reports about signature or checksum verification bypasses are especially welcome.