Pin your GitHub Actions. Prick holes in their supply chain security.
-
Updated
Jun 13, 2026 - Rust
Pin your GitHub Actions. Prick holes in their supply chain security.
Tooling to manage the `pyodide-lock.json` file
Scripts to pin poetry and pipenv dependencies
Pin workflow dependency versions to full-length hashes.
Add a description, image, and links to the dependency-pinning topic page so that developers can more easily learn about it.
To associate your repository with the dependency-pinning topic, visit your repo's landing page and select "manage topics."