The deploy is done pushing the code to git over SSH, indeed.
The issue is that the SSH port shouldn't be always open to the Internet (the ideal would be to have a list of IPs to open that port for, but Github Actions doesn't provide you that list).
For further actions, you may consider blocking this person and/or reporting abuse
We're a place where coders share, stay up-to-date and grow their careers.
Wouldn't SSH be a more secure option?
The deploy is done pushing the code to git over SSH, indeed.
The issue is that the SSH port shouldn't be always open to the Internet (the ideal would be to have a list of IPs to open that port for, but Github Actions doesn't provide you that list).