Skip to content

action-pin-check v0.3.0

Choose a tag to compare

View all tags
@itscloud0 itscloud0 released this 10 Jul 19:12
v0.3.0
56d1a47

action-pin-check v0.3.0

Feature release.

action-pin-check audits GitHub Actions workflows for external action refs that are missing, branch-based, tag-based, or short SHA pins. It is local-first, dependency-free at runtime, and now supports text, JSON, GitHub Actions annotation, and SARIF output.

Included:

  • --format sarif for GitHub code scanning upload workflows.
  • --format github-annotations for inline CI findings on exact workflow lines.
  • Existing text output for humans.
  • Existing JSON output for automation.
  • Existing --fail-on policy for CI gates.
Assets 2
Loading