11 ms·
Depending on your circumstances (and if the license of the action allows it) it's "easy" to fork the action and use your own fork. Instant "pinning".
by ratrocket 1y ago
Depending on your circumstances (and if the license of the action allows it) it's "easy" to fork the action and use your own fork. Instant "pinning".
- carlmr 1y agoBut how does that solve the issue with the forked action not using pinned versions itself. You need to recursively fork and modify every version of the GHA and do that to its sub-actions. You'd need something like a lockgile mechanism to prevent this.
- ratrocket 1y agoYes, that is completely true -- transitive dependencies are a problem. What I suggested only works in the simplest cases and isn't a great solution, more of a bandaid.