Security

Your code never leaves your CI. The Action runs in your environment.
Your model key stays yours. It’s a secret in your repo; we never see it.
You review and merge. Every fix arrives as a normal pull request.