Pipeline Security lab 1 Lab: CI/CD Pipeline Attack: GitHub Actions Secret Theft and OIDC Hardening Jun 26, 2026