3 ms·
Why do you need this? Just pin your actions to shasum
by NamlchakKhandro 10mo ago
Why do you need this?
Just pin your actions to shasum
- progbits 10mo agoIf that action itself has unpinned dependencies that doesn't accomplish much.
- baobun 10mo agoDon't use such actions. Or fork them and commit add the lockfile yourself, if you're cool with the implied maintenance.
- progbits 10mo agoSure, or we come up with a proper solution via lockfiles so we don't have keep forking and maintaining, and make full dependency locks the default so everyone benefits. This is a long solved problem in every other ecosystem. This particular implementation isn't great but it has the right idea.
- g947o 10mo ago> Or fork them and commit add the lockfile yourself Depending on the action you use, this is no small task. You might as well just switch to something else altogether.
- NamlchakKhandro 10mo agowhat unpinned dependencies?