If a repository uses Github Actions, the versions of the actions are pinned to specific commits (rather than tags or branches, which are mutable). This is enforced for ICTU repositories by the GitHub general actions permission "Require actions to be pinned to a full-length commit SHA".
More info: ICTU/github-policy#14
If a repository uses Github Actions, the versions of the actions are pinned to specific commits (rather than tags or branches, which are mutable). This is enforced for ICTU repositories by the GitHub general actions permission "Require actions to be pinned to a full-length commit SHA".
More info: ICTU/github-policy#14