Be Using Rootless Containers
(news.ycombinator.com)
1.
2.
Trivy vulnerability scanner breach pushed infostealer via GitHub Actions
(bleepingcomputer.com)