This article is the result of a collaboration with C.J. May. “GitHub Actions keep me up at night. I worry that a malicious actor will use GitHub Actions to inject code into one of my repositories unbeknownst to me.” Grayson Hardaway
