The GitHub Actions security mistakes linters miss

A YAML linter will tell you when your workflow won’t parse. It won’t tell you when your workflow...