GitHub Actions are insecure by default.

Episode #900