GitHub Actions abused by Megalodon attack to slip malicious commits into 5,500 repos

[Analysis] CISA contractor left AWS GovCloud admin keys, plaintext passwords, SAML certs, and Kubernetes configs on a public GitHub repo for 183 days — with secret scanning deliberately disabled