Skip to content

Pin actions to hashes #3422

Open
#3464
Open
Pin actions to hashes#3422
#3464

Description

@A5rocks
A5rocks
opened on Apr 8, 2026

https://astral.sh/blog/open-source-security-at-astral reminded me it would be very nice to pin actions to hashes. They even link to https://github.com/suzuki-shunsuke/pinact which we can probably stuff into autodeps!

Activity

  1. jakkdl commented on Jul 29, 2026

    @jakkdl
    jakkdl
    on Jul 29, 2026
    Member

    I've started using https://github.com/renovatebot/renovate in a repository, and it (among many many other things) supports updating github actions pinned to SHA's https://docs.renovatebot.com/modules/manager/github-actions/#digest-pinning-and-updating

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions