This is exactly why on a project I recently set up CI on, it is only run when a collaborator gives an approving review, or something is pushed directly to master.

I saw far too much of an attack surface from Github actions, especially with MSBuild.