As a follow-up to the webinar yesterday, I came across this article by Palo Alto Networks which outlines some good security measures to take with regard to Github Actions. https://www.paloaltonetworks.com/blog/prisma-cloud/github-actions-opt-out-permissions-model/