Actions should be pinned to a full-length commit SHA

Evidence

This check passes if the tag for each Action in the job is a full-length commit SHA.

Impact

Reduces the impact of compromise of a third-party GitHub Action

Remediation

Pin Actions to a full-length commit SHA. You can fix this issue by an automated pull request.

View Tags for each Action

1. Navigate to your dashboard.

2. Click "Overview"

3. Click "Actions should be pinned to a full-length commit SHA"

4.Check for failed actions.

5. Click "OPEN A FIX PR" to fix the issue.