Demonstration of GitHub Actions shell injection vulnerability - shows why environment variables don't fix the issue - View it on GitHub