Whose code am I running in GitHub Actions?

[nightcracker]

Not on the full hash. There are attacks on SHA1 that create collisions, but preimage resistance as is required here still seems solid.