suzuki-shunsuke/pinact
View on GitHub ↗ ★ 1,253 Go
pinact is a CLI to edit GitHub Workflow and Composite action files and pin versions of Actions and Reusable Workflows. pinact can also update their versions and verify version annotations.
4 mentions on Hacker News by 4 people: 0 stories, 4 comments · first 2025-12-16 · latest 2026-05-12
20082026
-
…tps://github.com/zizmorcore/zizmor-action Use pinact (you can brew install it) to pin it by checksum: https://github.com/suzuki-shunsuke/pinact
comment by SEJeff · 2026-05-12 · in Static Analysis for GitHub Actions -
…the cutesy short tag that GitHub encourages people to make mutable (v4.x.y instead of v4). [1]: https://github.com/suzuki-shunsuke/pinact [2]: https://github.com/davidism/gha-update [3]: https://docs.zizmor.sh/audits/#unpinned-uses
comment by woodruffw · 2026-03-23 · in GitHub appears to be struggling with measly three nines availability -
https://github.com/suzuki-shunsuke/pinact works great
comment by oldmancode · 2025-12-20 · in Gh-actions-lockfile: generate and verify lockfiles for GitHub Actions -
https://github.com/suzuki-shunsuke/pinact
comment by falsedan · 2025-12-16 · in Show HN: Gh-actions-lockfile: generate and verify lockfiles for GitHub Actions