Most GitHub Actions Workflows are Insecure in Some Way

A report by Legit Security highlights concerns around the security posture of the GitHub Actions marketplace, with most custom Actions lacking verification and being maintained by one developer.