Shameless plug, I pushed a small CLI for detecting unpinned dependencies and automatically fix them the other day: https://codeberg.org/madsrc/gh-action-pin htt

Shameless plug, I pushed a small CLI for detecting unpinned dependencies and automatically fix them the other day: https://codeberg.org/madsrc/gh-action-pin https://codeberg.org/madsrc/gh-action-pin Works great with commit hooks :P Also working on a feature to recursively scan remote dependencies for lack of pins, although that doesn’t allow for fixing, only detection. Very much alpha, but it works.