https://jerrygamblin.com/2020/08/27/build-an-open-source-appsec-pipeline-using-github-actions/