OIDC and GitHub Actions: securely preview PRs from outside contributors | Hacker News Reader