Re: [PATCH] ci: pin actions in the main workflow to full commit IDs

From: Junio C Hamano <gitster@pobox.com>
Date: Oct 24, 2026, 01:38 UTC
Message-ID: <xmqqzew327zf.fsf@gitster.g>
In-Reply-To: <atv8gYf8Le1WHTA0@com-79390>

Taylor Blau <ttaylorr@openai.com> writes:

> I think that we could reword the commit message to explain that benefit
> more clearly, but I do think this is the right policy.

Together with Ben Knoble's comments, I very much appreciate your pushing back. I agree that a different justification would be a good way to go.

Thanks.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.