3 ms·

It explains what it does, but not _why_, maybe I’m just not in the target audience. Can anyone enlighten me? If GitHub actions are stored in the repo as yaml t

by monkpit 5mo ago

It explains what it does, but not _why_, maybe I’m just not in the target audience. Can anyone enlighten me? If GitHub actions are stored in the repo as yaml then they’re already tracked - what’s this thing for?

skinfaxi 5mo ago
This seems to convert action tags like action/checkout@v3 to action/checkout@sha to avoid malicious retags.
- monkpit 5mo ago
  That makes perfect sense! I knew I was missing something. Thanks.