Modern software can’t function without continous deployment. Github Actions are at the forefront of workflow technologies, from CI/CD, software releases to platform specific testing it has got everything covered, while the often overlooked Action Permissions might become the Achilies Heal. Learn how a permission free workflow is an invitation to malicious elements, and fix the same by following the Principle of least privileges.