If you believe you have found a security issue in imgpkg, please privately and responsibly disclose it by following the directions in our security policy.