Two compromised actions-cool GitHub Actions came back online and resumed delivering Mini Shai-Hulud payloads after mutable tags pointed to malicious code, underscoring the need for SHA pinning. #actionscool #MiniShaiHulud #GitHubActions