Review the Github action source code

Reviewing the Github action code and checking if it has been audited or reviewed by security experts is an important security practice to reduce the risk of vulnerabilities in the CI/CD pipeline.
By inspecting the code and checking if it has been audited, organizations can identify potential security issues and increase their confidence in the security of the Github action.

Applies to

T0202 Inadequate CI/CD workflow permissions
T0122 Vulnerability in third-party CI/CD actions

References

None listed.