* Uniquely naming the job for use with `act -j` * Gitignoring a `.secrets` file which act reads to get env vars