Marketplace

action-pinning-overview

Why pinning GitHub Actions to SHA-256 commits matters for supply chain security. Attack vectors from unpinned actions and comparison of tag vs SHA pinning.

$ 설치

git clone https://github.com/adaptive-enforcement-lab/claude-skills /tmp/claude-skills && cp -r /tmp/claude-skills/skills/secure/action-pinning-overview ~/.claude/skills/claude-skills

// tip: Run this command in your terminal to install the skill