Vulnerabilities in GitHub Actions software