github-actions 2 Lab — CI/CD Pipeline Attack: GitHub Actions Secret Theft and OIDC Hardening Jun 26, 2026 YAML & GitHub Actions Walkthrough May 8, 2026