Comment by thombashi

For example, pin actions to a commit SHA associated with a git tag to follow the security best practices of GitHub actions. https://docs.github.com/en/actions/security-guides/security-...