Show all GitHub Actions being used by a user or organisation

Automatically add a reviewed-by trailer using GitHub code reviews and a GitHub Action

Handle multiple event types in a single GitHub Action by routing using GITHUB_EVENT_NAME and the payload action

Using arbitary branches for Actions is a risk, but as always it’s a compromise between security and making life easy for ourselves.



pin-github-action allows you to pin to a specific SHA whilst still pointing to a branch or tag