jongalloway/action-pinner
Scan and pin unpinned GitHub Actions references to commit SHAs.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| mode | Mode to run (scan|fix|enforce|pr) | no | scan |
| config | Path to .action-pinner.json | no | .action-pinner.json |
| path | Workflow file, directory, or glob to scan | no | — |
| exclude_path | Workflow file, directory, or glob to exclude | no | — |
| include_action | Comma-separated or newline-delimited action patterns to include | no | — |
| exclude_action | Comma-separated or newline-delimited action patterns to exclude | no | — |
| allow_actions | Comma-separated or newline-delimited enforcement allowlist patterns | no | — |
| exception_rules | Comma-separated or newline-delimited enforcement exception rules (<action>[@ref][::workflow-glob]) | no | — |
| json | Emit JSON output | no | false |
Outputs
| name | description |
|---|---|
| compliant | Whether enforcement completed without violations or invalid exceptions |
| allowed_count | Number of unpinned refs allowed by allowlists or exceptions |
| violation_count | Number of violating unpinned refs |
| invalid_exception_count | Number of malformed or expired exceptions |
| fingerprint | Deterministic run fingerprint |
| config_hash | Deterministic config hash |