The Lints workflows execute volodya-lombrozo/pdd-action@master, g4s8/xcop-action@master, ludeeus/action-shellcheck@master, and appleboy/telegram-action@master.
Moving external branches can change the result of an unchanged commit and makes historical CI failures impossible to reproduce from the repository state.
Expected result:
Pin every action to an immutable release tag or commit SHA and update those references through reviewed changes.
The Lints workflows execute
volodya-lombrozo/pdd-action@master,g4s8/xcop-action@master,ludeeus/action-shellcheck@master, andappleboy/telegram-action@master.Moving external branches can change the result of an unchanged commit and makes historical CI failures impossible to reproduce from the repository state.
Expected result:
Pin every action to an immutable release tag or commit SHA and update those references through reviewed changes.