Buildkite has built a GitHub Actions adapter... a good first step out of the GitHub Actions supply chain attack trap.