I've had issues running in my org with a repo and a private vulnerability disclosure that did not have actions available, and thus broke the entire run. This change fixes that.

I expect the same thing will happen if actions is not enabled (for example on a fork).