pin-to-commits-and-hashes.kt

// No pinning - on each invocation,
// different action's revision may run.
@file:DependsOn("actions:checkout:v4")

// Pinning to a specific action's commit,
// but still different JARs can be used on
// each invocation. This is what is done for
// YAML-based workflows, and it's enough there.
@file:DependsOn("actions:checkout:11bd71901bbe5b1630ceea73d27597364c9af683") // v4.2.2

// IMPOSSIBLE (yet): pinning to a specific JAR.
@file:DependsOn(
  "actions:checkout:11bd71901bbe5b1630ceea73d27597364c9af683",
  jarMd5="4dfebe6d43a1f3e082d166c26c60a154",
) // v4.2.2