Hi, I just replied in the GitHub issue thread. My account was not compromised. The workflow run referenced was due to reinstating the malicious actor’s branch temporarily which triggered the run.
4 Likes