[tooling] GitHub Actions pinning posture: tag-major vs. commit-SHA for workflow `uses:` references
April 29, 2026 · #251
Python
Difficulty: Medium
Labels
infrastructure ci/cd security tech-debt adr
Parent Repository
cosai-oasis/secure-ai-tooling
Python repository
76 21