CI/CD security is still a wild west. Folks. When will we stop treating GitHub Actions like a secure by default checkbox? https://www.reddit.com/user/ScottContini