vldmrdev

"It is a good manner to pin GitHub Actions versions by commit hash. GitHub tags are mutable so they have a substantial security and reliability risk."

Inspired by https://github.com/suzuki-shunsuke/pinact 😂

import requests


def git_action_sha(action: str) -> str:
    github_api = "https://api.github.com/repos"

vldmrdev

import requests

GITHUB_TOKEN = 'GitHub personal access token'  # Your GitHub personal access token
REPO_OWNER = 'username'  # The GitHub username/organization
REPO_NAME = 'repo-name'  # The repository name

url = f'https://api.github.com/repos/{REPO_OWNER}/{REPO_NAME}'

headers = {