zgosalvez / github-actions-ensure-sha-pinned-actions

A Github Action to ensure that actions are pinned to full length commit SHAs

https://github.com/marketplace/actions/ensure-sha-pinned-actions

zgosalvez/github-actions-ensure-sha-pinned-actions Issues

Workflow file with multiple uses only shows first failure
Updated 22 days ago1
Jobs with multiple steps will not fail if the last step is pinned
Closed 7 months ago1
Improvement: allowlist/specify files to check
Updated 8 months ago1
Improvement: support composite actions
Updated 3 months ago3
Incorrect handling of local jobs.
Closed 8 months ago7
Update to Node16 based on Githubs deprecation of Node12 actions
Closed 2 years ago1
Allow reusable jobs
Closed 2 years ago1
Feature Request - Optional Warning (or dry run) instead of an error
Closed 2 years ago1
[Improvement] Check dependencies recursively
Updated 9 months ago1
Support reusable workflows
Closed 2 years ago1
Jobs failing with 1.1.0 with job.uses from same repository
Closed 3 years ago1
1.1.0 release errors on local path actions, when 1.0.4 did not
Closed 3 years ago3
Improvement suggestion: provide sha of tag in error message
Updated 6 months ago3
Allow whitelisting certain actions
Closed 2 years ago3
Issues with shared Github Actions workflows
Closed 3 years ago2