In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates
CWE-863