GitHub Actions Security cheat sheet
blog.gitguardian.com