pinact
A CLI tool that pins GitHub Actions and reusable workflows to commit hashes and checks their versions.
By The pinact contributors
Compare pinact with another product
Alternatives
See all alternatives
About pinact
pinact edits GitHub workflow and composite action files to pin Actions and reusable workflows to commit hashes. It can check files without editing them, update pinned versions, and verify version comments.
The tool includes an offline check that does not use the GitHub API, can enforce minimum release ages, and supports GitHub Enterprise Server. It is intended for developers maintaining GitHub Actions workflows.
Strengths
- Pins Actions and reusable workflows to commit hashes
- Checks pinned versions and version comments
- Can check workflow files offline without the GitHub API
- Supports minimum release age rules
Limitations
- Focused on GitHub Actions and reusable workflows
Details
- Pricing
- FreeFree and open source under the MIT license.
- License
- MIT
- Developer
- The pinact contributors
- Platforms
- Command line
- How it runs
- Downloadable app
- Best suited for
- Maintainers who want to pin and verify GitHub workflow dependencies
- Categories
- Security tools, Developer tools
- Last verified
- Added
- Provenance
- Selected from the Homebrew formula