6 ms·
This is good, just bear in mind that if you put the hash of an external composite action and that action pulls on another one without a hash, you're still vulne
by loginatnine 1y ago
This is good, just bear in mind that if you put the hash of an external composite action and that action pulls on another one without a hash, you're still vulnerable on that transitive dependency.
- ebfe1 1y agooh damn - that is a great point! thanks matey!