Jeremy Herve
.
@jeremy,
GitHub Actions: Know Your Pipeline Dependencies!
The GitHub Actions Worm: Compromising GitHub Repositories Through the Actions Dependency Tree
https://www.paloaltonetworks.com/blog/prisma-cloud/github-actions-worm-dependencies/