Make your GitHub Actions usage more secure by pinning them to their SHA's.
# Homebrew:
brew install caarlos0/tap/pinata
# Go:
go install github.com/caarlos0/pinata@latestOr download from the releases page.
$ pinata [dir] # Defaults to .github/workflows
$ pinata ./myrepo/.github/workflows