GitHub Actions is vulnerable to supply chain attacks | Hacker News Reader