https://docs.goauthentik.io/docs/security/policy/#reporting-a-vulnerability instructs researchers to report security issues by email. But, https://docs.goauthentik.io/docs/security/policy/#disclosure-process references GitHub, and indeed GitHub's private vulnerability reporting feature is available on this repository.

Provide the URL or link to the exact page in the documentation to which you are referring.

https://docs.goauthentik.io/docs/security/policy/

Describe the solution you'd like

Clarify which is preferred, GitHub or email (or that both are fine).

Additional context

None