Pinned tag using SHA

Open nathannaveen opened this issue 4 years ago • 0 comments

Pinned actions by SHA instead of a tag because tags can be moved while SHA can’t.

https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies

Oct 26 '21 23:10 nathannaveen