Use GitHub actions at your own risk Malicious code can be inserted into any GitHub action, even those which are tagged. Devops Github-Actions 2019-12-20 4 minutes to read