I built a GitHub Actions security scanner, then spent longer proving it wrong

This project is a GitHub Actions security scanner that the author tested by trying to prove it wrong, offering a way to standardize deployments and automate ope