Misconfigured GitHub Action abuse