Auto-fix insecure GitHub Actions workflows by pinning actions and externalizing unsafe expressions | saasbrowser.ai