hasp: A paranoid scanner and kernel-sandboxed step runner for GitHub Actions | Heykuki News