GitHub Actions Security Checklist for Supply Chain Attacks

least privilege! though, attackers seem to always find a way through.