It's a bit silly, because if we can't trust GitHub, what are we doing here? But OSSF complains about it, so let's fix it.