Disclosure of an OIDC misconfiguration in a public GitHub repository. Specifics kept private at the request of the programme team.
2026-04-11: Thanks to Scott Bamforth for his responsible disclosure to help protect our github project repo.
https://commons.lbl.gov/spaces/cpp/pages/197691423/White+Hats+for+Science