Similar Items: Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows