GitHub Actions security enforcement went live today: actions/checkout now refuses by default to execute untrusted fork code ...