Pin external GitHub Actions references in YAML workflows to fixed SHAs and SemVer tags.
npx skills add https://github.com/beeman/skills --skill gh-pin-actions
Please help me install this Agent Skill. Skill: gh-pin-actions Source: https://github.com/beeman/skills/tree/main/gh-pin-actions Command: npx skills add https://github.com/beeman/skills --skill gh-pin-actions
Pin external GitHub Actions references in YAML workflows to fixed SHAs and exact SemVer tags for reliable, auditable CI.
Use the gh-pin-actions skill to scan a repository and pin all external actions to their latest stable SHAs.
High-intent search queries and answers about installing and using this skill.
To pin GitHub Actions in YAML workflows, this Skill scans .github/workflows, resolves the latest stable SemVer tags, and rewrites external action references to fixed commit SHAs with version notes.
Pinning GitHub Actions to fixed SHAs ensures reliable, auditable CI by preventing unauthorized modifications to upstream action code, guaranteeing reproducible builds across your repository workflows.
Yes, you can use the dry-run mode to preview changes. The Skill will provide diffs for review, allowing you to verify the resolved SemVer tags and commit SHAs before rewriting your YAML files.
The Skill uses GitHub API tokens when available to resolve the latest stable exact SemVer tags and corresponding commit SHAs for each external action, ensuring accurate and authenticated lookups.
The best way to update pinned actions is to run this Skill to scan your workflows, resolve the latest stable exact SemVer tags for each action, and automatically rewrite them to the new commit SHAs.
Yes, it discovers external action uses across repository GitHub workflows and nested action configurations, resolving and pinning all references to their corresponding commit SHAs for full CI traceability.
syou6162Convert GitHub Actions uses tag references to SHA references in YAML workflow files.
tacogipsPin GitHub Actions to commit SHAs and enforce minimal permissions.
nsalvacaoAutomate pre-commit hooks, linters, formatters, security scans, and CI/CD pipelines across Python, JavaScript/TypeScript, Go, and universal stacks.
openkaidenResolve GitHub Actions tags to immutable commit SHAs for workflow steps.
