There are a lot of subtle pitfalls as well. Like no default timeouts, excess permissions etc. I wrote about it in detail https://ashishb.net/tech/common-pitfal

There are a lot of subtle pitfalls as well. Like no default timeouts, excess permissions etc. I wrote about it in detail https://ashishb.net/tech/common-pitfalls-of-github-actions/ https://ashishb.net/tech/common-pitfalls-of-github-actions/ And even created a tool to generate good configs http://github.com/ashishb/gabo http://github.com/ashishb/gabo