GitHub Actions beg for a supply chain attack | Hacker News Reader