Pin GitHub Actions and reusable workflow refs to immutable SHAs before CI changes merge with pinact

Rewrite mutable GitHub Actions refs to commit SHAs so workflow changes do not ship with drifting dependencies.

agentskillexchange Updated 28 repo stars

File contents

Pin GitHub Actions and reusable workflow refs to immutable SHAs before CI changes merge with pinact

Rewrite mutable GitHub Actions refs to commit SHAs so workflow changes do not ship with drifting dependencies.

Prerequisites

pinact CLI, repository access to the target .github workflow files, and optional GitHub token access for API-backed pin resolution.

Installation

Requirements and caveats from upstream:

  • For tags, the commit's Committer.Date is checked (requires additional API call)

Basic usage or getting-started notes:

Documentation

Source

agentskillexchange/skills/tree/main/skills/pin-github-actions-and-reusable-workflow-refs-to-immutable-shas-before-ci-changes-merge-with-pinact commit cca11cbebc

Frequently asked questions

npx skillmds@latest add agentskillexchange/pin-github-actions-and-reusable-workflow-refs-to-immutable-s