Securing CI/CD for an open source project: lessons from Cilium | Dark Hacker News