Why GHA need a specific hash id instead of using specific version? #3145
-
for example, just checkout code action
it's not either npm, or container file. |
Beta Was this translation helpful? Give feedback.
Answered by
spencerschrock
Aug 18, 2023
Replies: 2 comments 1 reply
-
if we just use a hash id, then we can benefits from |
Beta Was this translation helpful? Give feedback.
1 reply
-
Tags can be changed, where as SHA hashes can't. With something like |
Beta Was this translation helpful? Give feedback.
0 replies
Answer selected by
spencerschrock
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Tags can be changed, where as SHA hashes can't. With something like
actions/checkout
, I don't think we need to worry about that happening, but we don't have any special logic for GitHub owned actions.