A journey through the insecure defaults in GitHub Actions - wait who committed code to my repo? - View it on GitHub