S semgrep.dev SHA pinning GitHub Actions across an organization 8 points mdean 2 months ago 2 comments