{"id":"6459841d-698a-4ada-99c8-16cf8810f0c8","shortId":"JKdSrc","kind":"skill","title":"Pin CI workflow actions and images with Ratchet","tagline":"Audit and rewrite CI/CD workflow references so agents can pin mutable actions, containers, and images to immutable versions before changes land.","description":"# Pin CI workflow actions and images with Ratchet\n\nAudit and rewrite CI/CD workflow references so agents can pin mutable actions, containers, and images to immutable versions before changes land.\n\n## Prerequisites\n\nRatchet CLI; repository CI YAML files; optional GITHUB_TOKEN for private GitHub resolution\n\n## Installation\n\nUse the upstream install or setup path that matches your environment:\n- Cargo, Go modules, NPM, Pip, or Yarn, but for CI/CD workflows. Ratchet supports:\n- Docker tags are mutable. This poses a substantial security and reliability risk.\n- brew install ratchet\n- go install github.com/sethvargo/ratchet@latest\n\nRequirements and caveats from upstream:\n- Compiled from source yourself. Note this option is not supported.\n- container or Docker-based references.\n\nBasic usage or getting-started notes:\n- There are a few options for installing ratchet:\n- Via homebrew:\n- sh\n\n- Source: https://github.com/sethvargo/ratchet\n- Extracted from upstream docs: https://raw.githubusercontent.com/sethvargo/ratchet/HEAD/README.md\n\n## Documentation\n\n- https://github.com/sethvargo/ratchet\n\n## Source\n\n- [Agent Skill Exchange](https://agentskillexchange.com/skills/pin-ci-workflow-actions-and-images-with-ratchet/)","tags":["pin","workflow","actions","and","images","with","ratchet","skills","agentskillexchange","agent-skills","ai-agents","ai-tools"],"capabilities":["skill","source-agentskillexchange","skill-pin-ci-workflow-actions-and-images-with-ratchet","topic-agent-skills","topic-ai-agents","topic-ai-tools","topic-awesome-list","topic-claude-code","topic-codex","topic-cursor","topic-llm","topic-mcp","topic-npx-skills","topic-openclaw","topic-skills-catalog"],"categories":["skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/agentskillexchange/skills/pin-ci-workflow-actions-and-images-with-ratchet","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add agentskillexchange/skills","source_repo":"https://github.com/agentskillexchange/skills","install_from":"skills.sh"}},"qualityScore":"0.454","qualityRationale":"deterministic score 0.45 from registry signals: · indexed on github topic:agent-skills · 8 github stars · SKILL.md body (1,220 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T19:11:43.923Z","embedding":null,"createdAt":"2026-05-18T13:18:20.899Z","updatedAt":"2026-05-18T19:11:43.923Z","lastSeenAt":"2026-05-18T19:11:43.923Z","tsv":"'/sethvargo/ratchet':160,171 '/sethvargo/ratchet/head/readme.md':167 '/sethvargo/ratchet@latest':117 '/skills/pin-ci-workflow-actions-and-images-with-ratchet/)':178 'action':4,20,33,49 'agent':16,45,173 'agentskillexchange.com':177 'agentskillexchange.com/skills/pin-ci-workflow-actions-and-images-with-ratchet/)':176 'audit':9,38 'base':137 'basic':139 'brew':110 'cargo':85 'caveat':120 'chang':28,57 'ci':2,31,63 'ci/cd':12,41,94 'cli':61 'compil':123 'contain':21,50,133 'doc':164 'docker':98,136 'docker-bas':135 'document':168 'environ':84 'exchang':175 'extract':161 'file':65 'get':143 'getting-start':142 'github':67,71 'github.com':116,159,170 'github.com/sethvargo/ratchet':158,169 'github.com/sethvargo/ratchet@latest':115 'go':86,113 'homebrew':155 'imag':6,23,35,52 'immut':25,54 'instal':73,77,111,114,152 'land':29,58 'match':82 'modul':87 'mutabl':19,48,101 'note':127,145 'npm':88 'option':66,129,150 'path':80 'pin':1,18,30,47 'pip':89 'pose':103 'prerequisit':59 'privat':70 'ratchet':8,37,60,96,112,153 'raw.githubusercontent.com':166 'raw.githubusercontent.com/sethvargo/ratchet/head/readme.md':165 'refer':14,43,138 'reliabl':108 'repositori':62 'requir':118 'resolut':72 'rewrit':11,40 'risk':109 'secur':106 'setup':79 'sh':156 'skill':174 'skill-pin-ci-workflow-actions-and-images-with-ratchet' 'sourc':125,157,172 'source-agentskillexchange' 'start':144 'substanti':105 'support':97,132 'tag':99 'token':68 'topic-agent-skills' 'topic-ai-agents' 'topic-ai-tools' 'topic-awesome-list' 'topic-claude-code' 'topic-codex' 'topic-cursor' 'topic-llm' 'topic-mcp' 'topic-npx-skills' 'topic-openclaw' 'topic-skills-catalog' 'upstream':76,122,163 'usag':140 'use':74 'version':26,55 'via':154 'workflow':3,13,32,42,95 'yaml':64 'yarn':91","prices":[{"id":"314f3868-020c-4579-b22a-b75937e8376a","listingId":"6459841d-698a-4ada-99c8-16cf8810f0c8","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"agentskillexchange","category":"skills","install_from":"skills.sh"},"createdAt":"2026-05-18T13:18:20.899Z"}],"sources":[{"listingId":"6459841d-698a-4ada-99c8-16cf8810f0c8","source":"github","sourceId":"agentskillexchange/skills/pin-ci-workflow-actions-and-images-with-ratchet","sourceUrl":"https://github.com/agentskillexchange/skills/tree/main/skills/pin-ci-workflow-actions-and-images-with-ratchet","isPrimary":false,"firstSeenAt":"2026-05-18T13:18:20.899Z","lastSeenAt":"2026-05-18T19:11:43.923Z"}],"details":{"listingId":"6459841d-698a-4ada-99c8-16cf8810f0c8","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"agentskillexchange","slug":"pin-ci-workflow-actions-and-images-with-ratchet","github":{"repo":"agentskillexchange/skills","stars":8,"topics":["agent-skills","ai-agents","ai-tools","awesome-list","claude-code","codex","cursor","llm","mcp","npx-skills","openclaw","skills-catalog"],"license":"mit","html_url":"https://github.com/agentskillexchange/skills","pushed_at":"2026-05-18T19:02:17Z","description":"The open catalog of AI agent skills — 2,000+ security-scanned skills for Claude Code, Cursor, Codex, and more.","skill_md_sha":"42ef7c7cbbca2ddb72e20a86c2afaabdeb20dc2d","skill_md_path":"skills/pin-ci-workflow-actions-and-images-with-ratchet/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/agentskillexchange/skills/tree/main/skills/pin-ci-workflow-actions-and-images-with-ratchet"},"layout":"multi","source":"github","category":"skills","frontmatter":{"name":"Pin CI workflow actions and images with Ratchet","description":"Audit and rewrite CI/CD workflow references so agents can pin mutable actions, containers, and images to immutable versions before changes land."},"skills_sh_url":"https://skills.sh/agentskillexchange/skills/pin-ci-workflow-actions-and-images-with-ratchet"},"updatedAt":"2026-05-18T19:11:43.923Z"}}