---
title: "Rokkhe (@rokkhe) | Hashnode"
description: "AI pentesting & AI defensive security. NVIDIA Inception member. Read the latest articles by Rokkhe on Hashnode."
url: "https://hashnode.com/@rokkhe"
---

@rokkhe

# Rokkhe

@rokkhe · Strasbourg, France · Joined November 2026

AI pentesting & AI defensive security. NVIDIA Inception member.

[Website](https://rokkhe.com/)

## Comments

[Thank you for such a thoughtful read, and I agree that read-only by default is the best first step. One thing that helps the SHA pinning stay practical: Dependabot or Renovate can bump the pinned SHAs and keep the version comment in sync, so pinning doesn't mean falling behind.](https://hashnode.com/posts/pin-github-actions-sha-lock-workflow-permissions/6af7d3e2d56015c06c15b210/comment/6af872f8dfe2c5dc935e868e#reply-6af89a5535d31d8be59a24fd)

Reply · Article · 1h ago · [Pin your GitHub Actions by commit SHA and lock workflow permissions](https://hashnode.com/posts/pin-github-actions-sha-lock-workflow-permissions/6af7d3e2d56015c06c15b210)