Comment by rajbot

This GitHub Action is still compromised, leaving thousands of repositories vulnerable.

Is there anyone here from GitHub that can help get this fixed?