{"id":"787b61f2-2c5d-4077-869e-f986272718f8","shortId":"sWK7WD","kind":"skill","title":"Pin GitHub Actions and reusable workflow refs to immutable SHAs before CI changes merge with pinact","tagline":"Rewrite mutable GitHub Actions refs to commit SHAs so workflow changes do not ship with drifting dependencies.","description":"# Pin GitHub Actions and reusable workflow refs to immutable SHAs before CI changes merge with pinact\n\nRewrite mutable GitHub Actions refs to commit SHAs so workflow changes do not ship with drifting dependencies.\n\n## Prerequisites\n\npinact CLI, repository access to the target .github workflow files, and optional GitHub token access for API-backed pin resolution.\n\n## Installation\n\nRequirements and caveats from upstream:\n- For tags, the commit's Committer.Date is checked (requires additional API call)\n\nBasic usage or getting-started notes:\n- $ pinact run\n- sh\n- pinact run [<workflow file>...]\n\n- Source: https://github.com/suzuki-shunsuke/pinact\n- Extracted from upstream docs: https://raw.githubusercontent.com/suzuki-shunsuke/pinact/HEAD/README.md\n\n## Documentation\n\n- https://github.com/suzuki-shunsuke/pinact\n\n## Source\n\n- [Agent Skill Exchange](https://agentskillexchange.com/skills/pin-github-actions-and-reusable-workflow-refs-to-immutable-shas-before-ci-changes-merge-with-pinact/)","tags":["pin","github","actions","and","reusable","workflow","refs","immutable","shas","before","changes","merge"],"capabilities":["skill","source-agentskillexchange","skill-pin-github-actions-and-reusable-workflow-refs-to-immutable-shas-before-ci-changes-merge-with-pinact","topic-agent-skills","topic-ai-agents","topic-ai-tools","topic-awesome-list","topic-claude-code","topic-codex","topic-cursor","topic-llm","topic-mcp","topic-npx-skills","topic-openclaw","topic-skills-catalog"],"categories":["skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/agentskillexchange/skills/pin-github-actions-and-reusable-workflow-refs-to-immutable-shas-before-ci-changes-merge-with-pinact","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add agentskillexchange/skills","source_repo":"https://github.com/agentskillexchange/skills","install_from":"skills.sh"}},"qualityScore":"0.454","qualityRationale":"deterministic score 0.45 from registry signals: · indexed on github topic:agent-skills · 8 github stars · SKILL.md body (994 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T19:11:44.003Z","embedding":null,"createdAt":"2026-05-18T13:18:20.999Z","updatedAt":"2026-05-18T19:11:44.003Z","lastSeenAt":"2026-05-18T19:11:44.003Z","tsv":"'/skills/pin-github-actions-and-reusable-workflow-refs-to-immutable-shas-before-ci-changes-merge-with-pinact/)':140 '/suzuki-shunsuke/pinact':122,133 '/suzuki-shunsuke/pinact/head/readme.md':129 'access':71,82 'action':3,20,36,53 'addit':104 'agent':135 'agentskillexchange.com':139 'agentskillexchange.com/skills/pin-github-actions-and-reusable-workflow-refs-to-immutable-shas-before-ci-changes-merge-with-pinact/)':138 'api':85,105 'api-back':84 'back':86 'basic':107 'call':106 'caveat':92 'chang':13,27,46,60 'check':102 'ci':12,45 'cli':69 'commit':23,56,98 'committer.date':100 'depend':33,66 'doc':126 'document':130 'drift':32,65 'exchang':137 'extract':123 'file':77 'get':111 'getting-start':110 'github':2,19,35,52,75,80 'github.com':121,132 'github.com/suzuki-shunsuke/pinact':120,131 'immut':9,42 'instal':89 'merg':14,47 'mutabl':18,51 'note':113 'option':79 'pin':1,34,87 'pinact':16,49,68,114,117 'prerequisit':67 'raw.githubusercontent.com':128 'raw.githubusercontent.com/suzuki-shunsuke/pinact/head/readme.md':127 'ref':7,21,40,54 'repositori':70 'requir':90,103 'resolut':88 'reusabl':5,38 'rewrit':17,50 'run':115,118 'sh':116 'shas':10,24,43,57 'ship':30,63 'skill':136 'skill-pin-github-actions-and-reusable-workflow-refs-to-immutable-shas-before-ci-changes-merge-with-pinact' 'sourc':119,134 'source-agentskillexchange' 'start':112 'tag':96 'target':74 'token':81 'topic-agent-skills' 'topic-ai-agents' 'topic-ai-tools' 'topic-awesome-list' 'topic-claude-code' 'topic-codex' 'topic-cursor' 'topic-llm' 'topic-mcp' 'topic-npx-skills' 'topic-openclaw' 'topic-skills-catalog' 'upstream':94,125 'usag':108 'workflow':6,26,39,59,76","prices":[{"id":"0a88092b-cb97-4e4a-b09f-3b369fefad6c","listingId":"787b61f2-2c5d-4077-869e-f986272718f8","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"agentskillexchange","category":"skills","install_from":"skills.sh"},"createdAt":"2026-05-18T13:18:20.999Z"}],"sources":[{"listingId":"787b61f2-2c5d-4077-869e-f986272718f8","source":"github","sourceId":"agentskillexchange/skills/pin-github-actions-and-reusable-workflow-refs-to-immutable-shas-before-ci-changes-merge-with-pinact","sourceUrl":"https://github.com/agentskillexchange/skills/tree/main/skills/pin-github-actions-and-reusable-workflow-refs-to-immutable-shas-before-ci-changes-merge-with-pinact","isPrimary":false,"firstSeenAt":"2026-05-18T13:18:20.999Z","lastSeenAt":"2026-05-18T19:11:44.003Z"}],"details":{"listingId":"787b61f2-2c5d-4077-869e-f986272718f8","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"agentskillexchange","slug":"pin-github-actions-and-reusable-workflow-refs-to-immutable-shas-before-ci-changes-merge-with-pinact","github":{"repo":"agentskillexchange/skills","stars":8,"topics":["agent-skills","ai-agents","ai-tools","awesome-list","claude-code","codex","cursor","llm","mcp","npx-skills","openclaw","skills-catalog"],"license":"mit","html_url":"https://github.com/agentskillexchange/skills","pushed_at":"2026-05-18T19:02:17Z","description":"The open catalog of AI agent skills — 2,000+ security-scanned skills for Claude Code, Cursor, Codex, and more.","skill_md_sha":"a780b70026a618fc41d72af638df191acad17502","skill_md_path":"skills/pin-github-actions-and-reusable-workflow-refs-to-immutable-shas-before-ci-changes-merge-with-pinact/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/agentskillexchange/skills/tree/main/skills/pin-github-actions-and-reusable-workflow-refs-to-immutable-shas-before-ci-changes-merge-with-pinact"},"layout":"multi","source":"github","category":"skills","frontmatter":{"name":"Pin GitHub Actions and reusable workflow refs to immutable SHAs before CI changes merge with pinact","description":"Rewrite mutable GitHub Actions refs to commit SHAs so workflow changes do not ship with drifting dependencies."},"skills_sh_url":"https://skills.sh/agentskillexchange/skills/pin-github-actions-and-reusable-workflow-refs-to-immutable-shas-before-ci-changes-merge-with-pinact"},"updatedAt":"2026-05-18T19:11:44.003Z"}}