Securing GitHub Actions Pipelines Against Supply Chain Attacks

Been thinking about writing this one for a while. Supply chain attacks against CI/CD pipelines have been picking up pace over the past two years and the March 2025 tj-actions incident was the one that