GitHub Actions 1 · Secrets and security
Pin an action to a commit
Use a full commit SHA instead of a tag so a retagged action can't change under you.
- uses: actions/checkout@<full-length-commit-sha>
Official GitHub Actions 1 documentation
More secrets and security commands
All secrets and security commands · GitHub Actions 1 cheatsheet