Ensure your GitHub Actions workflows are secure by verifying that all external actions are pinned to a full commit SHA that exists on the default branch of the action repository. - View it on GitHub