Glossary term
What is pinning (Pinning (commit SHA))?
pinning stands for Pinning (commit SHA).
Fixing a dependency or action to an exact version or full commit hash so it cannot change under you.
Learn it properly · Security for DevelopersLesson 6: Dependencies and the Supply Chain: npm, Lockfiles and GitHub ActionsHow a package you did not write can hurt you: typosquatting, install scripts, malicious updates. Lockfiles, npm audit, Dependabot, secret scanning and securing your CI.