GitHub Actions is the weakest link