Action pinning #37
Description
I tried to manually pin the action today, but that didn't work, guessing because of actions invoked by Claude.
Prepare workflow directory
Prepare all required actions
Getting action download info
Download action repository 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' (SHA:11bd71901bbe5b1630ceea73d27597364c9af683)
Download action repository 'anthropics/claude-code-security-review@0fc84e799e6c2986330eda2ebb1d734aa0017478' (SHA:0fc84e799e6c2986330eda2ebb1d734aa0017478)
Getting action download info
Error: The actions actions/setup-python@v5, actions/cache@v4, actions/setup-node@v4, and actions/upload-artifact@v4 are not allowed in MyCompany/MyRepo because all actions must be pinned to a full-length commit SHA.