GitHub Actions exploitation: untrusted input

https://www.synacktiv.com/publications/github-actions-exploitation-untrusted-input.html

https://twitter.com/home/status/1812275874714022094

https://twitter.com/home/status/1812347719551463489

https://twitter.com/home/status/1812361294470660299