https://vulert.com/blog/leveraging-github-actions-environment-variables/