workflow-sentinel

pin GitHub Actions by SHA

Ensure GitHub Actions workflows pin third-party actions by commit SHA.

• 305/week
• 1★
• MIT
• v1.1.0
• In use on this site
• Supply Chain

Read the full README on GitHub (opens in a new tab)View on npm (opens in a new tab)

• supply-chain-sentinel

  one supply-chain gate

• package-tripwire

  flag risky dependency changes

• license-sentinel

  enforce licence policy