Securing CI/CD for an open source project: lessons from Cilium | Hacker News Reader