在 CI 更改与 pinact 合并之前，将 GitHub Actions 和可重用工作流引用固定到不可变的 SHA
Note: "pinact" appears to be a specific tool or process name, so it's kept as-is since it was mentioned in the original text to remain unchanged.
Rewrite mutable GitHub Actions refs to commit SHAs so workflow changes do not ship with drifting dependencies.
Prerequisites
pinact CLI, repository access to the target .github workflow files, and optional GitHub token access for API-backed pin resolution.
Installation
Requirements and caveats from upstream:
- For tags, the commit's Committer.Date is checked (requires additional API call)
Basic usage or getting-started notes:
- $ pinact run
- sh
- pinact run [<workflow file>...]
- Source: https://github.com/1991513ccie-png/skills
- Extracted from upstream docs: https://raw.githubusercontent.com/suzuki-shunsuke/pinact/HEAD/README.md
Documentation
- https://github.com/1991513ccie-png/skills
