GitHub Actions Supply Chain Flop

In a display of total predictability, threat actors have compromised the GitHub Actions workflow to harvest credentials while we all look on in weary silence. This affected every project foolish enough to trust third-party helpers, which is to say, all of them. To protect ourselves from this recurring nightmare, we might consider actually auditing our dependencies, but let us be honest, we will likely just wait for the next breach notification and pretend to be surprised then.