CS
The security concern makes sense. However, why not fork the action and have complete control, refreshing from upstream at your leisure and comfort? What if the author decided to no longer host that code?
CommentArticleMay 28, 2022Why You Should Not Use The Version Tag Or Branch Name When Using GitHub Actions