step-security/Ensure SHA Pinned Actions
Ensure that GitHub Actions are pinned to full length commit SHAs
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| allowlist | The list of owners or repositories that will be ignored and will not throw an error. Each entry must be on a new line. Optional. Default: `` (deny all) | — | — |
| dry_run | Set to `true` to show warnings instead of failing. Optional. Default: `false` (fail on any error) | — | false |
Outputs
no outputs