Update version comments for SHA-pinned GitHub Actions by jproberts · Pull Request #5951 · dependabot/dependabot-core · GitHub
DRANK

GitHub encourages pinning third-party GitHub Actions to a full length commit SHA. It's common for actions pinned by commit SHA to include a comment specifying the version associated with the commit...

github.com
Related Topics: GitHub Git
1 comments
  • dependabotにこの変更入ってたの知らなかった full changeset hashでの指定を検討してもよさそう / “Update version comments for SHA-pinned GitHub Actions by jproberts · Pull Request #5951 · dependabot/dependabot-core” htn.to/2RKqPxezwd