https://medium.com/@cyber-oracle/dependabots-deception-uncovering-vulnerabilities-in-ci-cd-pipelines-4be7d1d93c11
