Action that fails if any of the base images contain Docker ONBUILD instructions (which is a potential supply chain attack vector) - View it on GitHub