Hint 1 Take a look at this blog for a full walk through. https://snyk.io/blog/building-a-secure-pipeline-with-github-actions/