{"repo":"mheap/pin-github-action","free":true,"listed":false,"github":"https://github.com/mheap/pin-github-action","clone":"git clone https://github.com/mheap/pin-github-action.git","description":"Pin your GitHub actions to a specific hash","language":"JavaScript","stars":182,"topics":["github-actions","github","actions","security","cli"],"license":"MIT","category":"security-tools","readme_excerpt":"pin-github-action This is a tool that allows you to pin your GitHub actions dependencies to a specific SHA without requiring that you update every action manually each time you want to use a newer version of an action. It achieves this by converting your workflow to use a specific commit hash, whilst adding the original value as a comment on that line. This allows us to resolve newer SHAs for that target ref automatically in the future. It converts this: In to this: For more information, see How it works. Installation Nodejs Docker Usage Use on single file: Use on all YAML YML files in a single directory: Use on all YAML YML files in directory tree: If you run the tool on a directory and want to continue processing when a single file fails, pass the --continue-on-error parameter: If you use private actions (or are hitting rate limits), you'll need to provide a GitHub access token: Run it as many times as you like! Each time you run the tool the exact SHA will be updated to the latest available SHA for your pinned ref. If you're having issues, run with debug logging enabled and open an issue: You can pass multiple files at once by adding additional files as arguments: And you can mix directories with files: Leaving Actions unpinned To leave an action unpinned, pass the --allow option when running pin-github-action . Running pin-github-action /path/to/.github/workflows/your-name.yml --allow \"actions/ \" will turn this: Into this (notice how actions/checkout@main is ignored): You","default_branch":null,"files":null,"tree":[],"storefront":"/r/mheap","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/mheap/pin-github-action/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}