home/categories/cicd/adaptive-enforcement-lab-claude-skills-skills-secure-action-pinning-overview-skill-md
quick start
Installation and usage
Why pinning GitHub Actions to SHA-256 commits matters for supply chain security. Attack vectors from unpinned actions and comparison of tag vs SHA pinning.
安裝
$ install --globalskills.sh
使用
安裝後，您可以通過在終端運行以下命令來使用此技能：
skills use action-pinning-overview