pinned-tag
OfficialPin actions and SHAs for immutable workflows.
Authordallay
Version1.0.0
Installs0
System Documentation
What problem does it solve?
Pinning GitHub Actions tags to specific commit SHAs prevents mutable references from breaking builds and reduces supply-chain risk.
Core Features & Use Cases
- Resolve and replace: find tags in workflows and replace them with the corresponding full commit SHAs.
- Auditing and verification: scan manifests and workflow files to identify unpinned tags and report potential risks.
- Commit policy guidance: provide a safe workflow for applying patches with explicit commit approval.
Quick Start
Use this skill to pin a v2 action to its commit SHA in your workflow.
Dependency Matrix
Required Modules
None requiredComponents
Standard package💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: pinned-tag Download link: https://github.com/dallay/cvix/archive/main.zip#pinned-tag Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.