How many GitHub repositories pin their dependencies?
How many GitHub repositories pin their dependencies?
While researching GitHub Actions security best practices for a talk, I asked myself: "How many GitHub repositories actually pin their dependencies?" As I was not able to find any hard numbers, I went to gather the data myself. The results (and raw data) are available at: http://pin-gh-actions.kammel.dev/ The code is available on GitHub: https://github.com/datosh/pinned-actions in case you want to replicate the data or report any issues.
Share cardActual performance
Launch Intel predictions
Analyze your own launch →Correct prediction on native model
Similar products
Pin Me on IPFS
StableBuild – pin and freeze any build dependency
All Your Links In One Pin
My Github résumé
GitHub + Tetris = Gitris
My Attempt to Gamify Github
completeme, 't' in Github for Bash
Gitty for GitHub
GitHub Popularity Contest
A Github for writers?