Mar 22 2021 GitHub awards bug bounty hunter $25,000 for Actions secrets theft report Source The vulnerability was found in GitHub’s pull request mechanism [...]