Improvement suggestion: provide sha of tag in error message

[pinkasey]

here's an example error that I got:

  Error: actions/[email protected] is not pinned to a full length commit SHA.

Here's what I would like to get, if possible:

  Error: actions/[email protected] is not pinned to a full length commit SHA. replace with: "actions/checkout@1e204e9a9253d643386038d443f96446fa156a97 #v2.3.5" verify here .
  .
  .
  Note: don't apply suggestions from this output without checking them first!

And have this link in verify here.

Something like that.

[pinkasey]

And thanks for this awesome GH Action. I would've though GH would provide this themselves.

[MPV]

@pinkasey Have you tried using Renovate, and having it make PRs for pinning it for you? See:

• https://docs.renovatebot.com/modules/manager/github-actions/

Specifically, see helpers:pinGitHubActionDigests

[pinkasey]

@pinkasey Have you tried using Renovate, and having it make PRs for pinning it for you? See:

* https://docs.renovatebot.com/modules/manager/github-actions/

Specifically, see helpers:pinGitHubActionDigests

That looks awesome, @MPV ! Thanks!!