Pin GitHub Actions to specific commit SHAs for security#3294

Open

Herklos wants to merge 3 commits intodevfrom

claude/fix-actions-fork-security-92Sen

Commits on Mar 5, 2026

Security: harden GitHub Actions workflow against supply chain attacks
claude
committed
Security: revert SHA pins, keep permissions and tag fixes only
claude
committed
Security: restore original version tags, keep only permission changes
claude
committed