Please report security problems privately through GitHub: open the repository's Security tab and choose Report a vulnerability. Do not open a public issue for them.

Useful details: the file or workflow concerned, what an attacker could do, and the steps to reproduce it.

The code and the GitHub Actions workflows in this repository: for example, a way to run code through a workflow, to leak a repository secret or to alter the published outputs.

The forecast itself is not a security matter. For a wrong number, a missing poll or a data error, open an ordinary issue.

An acknowledgement within a few days, and a fix or a decision as soon as the report has been confirmed. Reporters are credited unless they prefer otherwise.