{"_id":"pin-github-action","_rev":"3262197","name":"pin-github-action","description":"Pin your GitHub Actions to specific versions automatically!","dist-tags":{"latest":"1.9.1"},"maintainers":[{"name":"mheap","email":""}],"time":{"modified":"2024-03-21T09:46:57.000Z","created":"2020-01-14T15:53:22.998Z","1.9.1":"2023-11-23T13:30:58.327Z","1.9.0":"2023-11-20T16:14:56.523Z","1.8.0":"2022-10-20T12:35:19.123Z","1.6.0":"2022-05-14T14:26:49.040Z","1.5.0":"2021-12-14T20:00:33.379Z","1.4.0":"2021-09-02T15:52:05.080Z","1.3.1":"2021-08-24T16:00:06.657Z","1.3.0":"2021-06-16T13:38:23.044Z","1.2.0":"2021-05-26T08:14:35.485Z","1.1.3":"2021-03-07T16:07:10.666Z","1.1.2":"2020-12-04T17:51:02.950Z","1.1.1":"2020-11-12T15:29:09.669Z","1.1.0":"2020-11-10T21:25:20.516Z","1.0.2":"2020-11-08T15:49:28.059Z","1.0.1":"2020-01-14T15:54:58.532Z","1.0.0":"2020-01-14T15:53:22.998Z"},"users":{},"author":{"name":"Michael Heap","email":"m@michaelheap.com"},"versions":{"1.9.1":{"name":"pin-github-action","version":"1.9.1","description":"Pin your GitHub Actions to specific versions automatically!","main":"index.js","scripts":{"test":"jest","lint":"eslint *.js","lint-fix":"eslint --fix *.js"},"keywords":["github actions","github","security"],"author":{"name":"Michael Heap","email":"m@michaelheap.com"},"license":"MIT","devDependencies":{"eslint":"^8","eslint-plugin-prettier":"^4","jest":"^29","nock":"^13","prettier":"^2"},"dependencies":{"@octokit/rest":"^18","commander":"^9","debug":"^4.3.4","matcher":"^4.0.0","yaml":"^2.1.3"},"bin":{"pin-github-action":"bin.js"},"gitHead":"8e271c1eb28e643569f502d4df589ce5d77add4e","_id":"pin-github-action@1.9.1","_nodeVersion":"16.20.2","_npmVersion":"8.19.4","dist":{"shasum":"d16d9352306df8ff2784b3eb31cc9bbfb3ea8cad","size":9927,"noattachment":false,"key":"/pin-github-action/-/pin-github-action-1.9.1.tgz","tarball":"http://registry.cnpm.dingdandao.com/pin-github-action/download/pin-github-action-1.9.1.tgz"},"_npmUser":{"name":"mheap","email":"m@michaelheap.com"},"directories":{},"maintainers":[{"name":"mheap","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/pin-github-action_1.9.1_1700746258168_0.8501321732964855"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-11-23T13:30:58.327Z","publish_time":1700746258327,"_source_registry_name":"default","_cnpm_publish_time":1700746258327},"1.9.0":{"name":"pin-github-action","version":"1.9.0","description":"Pin your GitHub Actions to specific versions automatically!","main":"index.js","scripts":{"test":"jest","lint":"eslint *.js","lint-fix":"eslint --fix *.js"},"keywords":["github actions","github","security"],"author":{"name":"Michael Heap","email":"m@michaelheap.com"},"license":"MIT","devDependencies":{"eslint":"^8","eslint-plugin-prettier":"^4","jest":"^29","nock":"^13","prettier":"^2"},"dependencies":{"@octokit/rest":"^18","commander":"^9","debug":"^4.3.4","matcher":"^4.0.0","yaml":"^2.1.3"},"bin":{"pin-github-action":"bin.js"},"gitHead":"54531e1dc96cd1512659bb75964bda2ce4e160ba","_id":"pin-github-action@1.9.0","_nodeVersion":"16.20.2","_npmVersion":"8.19.4","dist":{"shasum":"edb65b80a1126c504225f0fff9ef259273109621","size":9874,"noattachment":false,"key":"/pin-github-action/-/pin-github-action-1.9.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/pin-github-action/download/pin-github-action-1.9.0.tgz"},"_npmUser":{"name":"mheap","email":"m@michaelheap.com"},"directories":{},"maintainers":[{"name":"mheap","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/pin-github-action_1.9.0_1700496896333_0.7427859567285615"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-11-20T16:14:56.523Z","publish_time":1700496896523,"_source_registry_name":"default","_cnpm_publish_time":1700496896523},"1.8.0":{"name":"pin-github-action","version":"1.8.0","description":"Pin your GitHub Actions to specific versions automatically!","main":"index.js","scripts":{"test":"jest","lint":"eslint *.js","lint-fix":"eslint --fix *.js"},"keywords":["github actions","github","security"],"author":{"name":"Michael Heap","email":"m@michaelheap.com"},"license":"MIT","devDependencies":{"eslint":"^8","eslint-plugin-prettier":"^4","jest":"^29","nock":"^13","prettier":"^2"},"dependencies":{"@octokit/rest":"^18","commander":"^9","debug":"^4.3.4","matcher":"^4.0.0","yaml":"^2.1.3"},"bin":{"pin-github-action":"bin.js"},"gitHead":"88272768bc7502d0210eaec318b4225f384ad25e","_id":"pin-github-action@1.8.0","_nodeVersion":"16.17.1","_npmVersion":"8.15.0","dist":{"shasum":"50f0833e6af5bbba2bbfc978ca5e498b5670b9d8","size":9671,"noattachment":false,"key":"/pin-github-action/-/pin-github-action-1.8.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/pin-github-action/download/pin-github-action-1.8.0.tgz"},"_npmUser":{"name":"mheap","email":"m@michaelheap.com"},"directories":{},"maintainers":[{"name":"mheap","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/pin-github-action_1.8.0_1666269318954_0.09434366109543268"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2022-10-20T12:35:19.123Z","publish_time":1666269319123,"_cnpm_publish_time":1666269319123},"1.6.0":{"name":"pin-github-action","version":"1.6.0","description":"Pin your GitHub Actions to specific versions automatically!","main":"index.js","scripts":{"test":"jest","lint":"eslint *.js","lint-fix":"eslint --fix *.js"},"keywords":["github actions","github","security"],"author":{"name":"Michael Heap","email":"m@michaelheap.com"},"license":"MIT","devDependencies":{"eslint":"^7","eslint-plugin-prettier":"^3","jest":"^27","nock":"^13","prettier":"^2"},"dependencies":{"@octokit/rest":"^18","commander":"^8","debug":"^4.3.4","matcher":"^4.0.0","yaml":"^1"},"bin":{"pin-github-action":"bin.js"},"gitHead":"3d51df89844629c6dc7d9cf2b7fb6be16a64fdbd","_id":"pin-github-action@1.6.0","_nodeVersion":"12.22.12","_npmVersion":"6.14.16","dist":{"shasum":"ac4cbaa9d46a56a32fe272a0b53a1dbe823fe064","size":8940,"noattachment":false,"key":"/pin-github-action/-/pin-github-action-1.6.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/pin-github-action/download/pin-github-action-1.6.0.tgz"},"_npmUser":{"name":"mheap","email":"m@michaelheap.com"},"directories":{},"maintainers":[{"name":"mheap","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/pin-github-action_1.6.0_1652538408901_0.8172182510328199"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2022-05-14T14:26:51.732Z","publish_time":1652538409040,"_cnpm_publish_time":1652538409040},"1.5.0":{"name":"pin-github-action","version":"1.5.0","description":"Pin your GitHub Actions to specific versions automatically!","main":"index.js","scripts":{"test":"jest","lint":"eslint *.js","lint-fix":"eslint --fix *.js"},"keywords":["github actions","github","security"],"author":{"name":"Michael Heap","email":"m@michaelheap.com"},"license":"MIT","devDependencies":{"eslint":"^7","eslint-plugin-prettier":"^3","jest":"^27","nock":"^13","prettier":"^2"},"dependencies":{"@octokit/rest":"^18","commander":"^8","matcher":"^4.0.0","yaml":"^1"},"bin":{"pin-github-action":"bin.js"},"gitHead":"c5a196e6c83d450c6327dcb0294eee64db07f472","_id":"pin-github-action@1.5.0","_nodeVersion":"12.22.7","_npmVersion":"6.14.15","dist":{"shasum":"2360ef1d0e28456f7c8d6add0168312c2cb3668b","size":7503,"noattachment":false,"key":"/pin-github-action/-/pin-github-action-1.5.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/pin-github-action/download/pin-github-action-1.5.0.tgz"},"_npmUser":{"name":"mheap","email":"m@michaelheap.com"},"directories":{},"maintainers":[{"name":"mheap","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/pin-github-action_1.5.0_1639512033227_0.7041440496018256"},"_hasShrinkwrap":false,"publish_time":1639512033379,"_cnpm_publish_time":1639512033379,"_cnpmcore_publish_time":"2021-12-15T22:40:54.665Z"},"1.4.0":{"name":"pin-github-action","version":"1.4.0","description":"Pin your GitHub Actions to specific versions automatically!","main":"index.js","scripts":{"test":"jest","lint":"eslint *.js","lint-fix":"eslint --fix *.js"},"keywords":["github actions","github","security"],"author":{"name":"Michael Heap","email":"m@michaelheap.com"},"license":"MIT","devDependencies":{"eslint":"^7","eslint-plugin-prettier":"^3","jest":"^27","nock":"^13","prettier":"^2"},"dependencies":{"@octokit/rest":"^18","commander":"^8","matcher":"^4.0.0","yaml":"^1"},"bin":{"pin-github-action":"bin.js"},"gitHead":"02a43f8bb399adc0d21677aff2681ab05f39ef7d","_id":"pin-github-action@1.4.0","_nodeVersion":"12.22.6","_npmVersion":"6.14.15","dist":{"shasum":"f9f8ff3227e2b16fd0ceaea6e45e31bb30c05d0d","size":7238,"noattachment":false,"key":"/pin-github-action/-/pin-github-action-1.4.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/pin-github-action/download/pin-github-action-1.4.0.tgz"},"_npmUser":{"name":"mheap","email":"m@michaelheap.com"},"directories":{},"maintainers":[{"name":"mheap","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/pin-github-action_1.4.0_1630597924919_0.8861722339667628"},"_hasShrinkwrap":false,"publish_time":1630597925080,"_cnpm_publish_time":1630597925080,"_cnpmcore_publish_time":"2021-12-15T22:40:55.094Z"},"1.3.1":{"name":"pin-github-action","version":"1.3.1","description":"Pin your GitHub Actions to specific versions automatically!","main":"index.js","scripts":{"test":"jest","lint":"eslint *.js","lint-fix":"eslint --fix *.js"},"keywords":["github actions","github","security"],"author":{"name":"Michael Heap","email":"m@michaelheap.com"},"license":"MIT","devDependencies":{"eslint":"^7","eslint-plugin-prettier":"^3","jest":"^27","nock":"^13","prettier":"^2"},"dependencies":{"@octokit/rest":"^18","commander":"^8","matcher":"^4.0.0","yaml":"^1"},"bin":{"pin-github-action":"bin.js"},"gitHead":"2e8f2641ea3f9b9f9741cd6521c0f8ee77caf742","_id":"pin-github-action@1.3.1","_nodeVersion":"12.22.5","_npmVersion":"6.14.14","dist":{"shasum":"3e9d24e82b463c04c1a169a8f3ff8e2b54cfbffb","size":7157,"noattachment":false,"key":"/pin-github-action/-/pin-github-action-1.3.1.tgz","tarball":"http://registry.cnpm.dingdandao.com/pin-github-action/download/pin-github-action-1.3.1.tgz"},"_npmUser":{"name":"mheap","email":"m@michaelheap.com"},"directories":{},"maintainers":[{"name":"mheap","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/pin-github-action_1.3.1_1629820806487_0.22456770675323567"},"_hasShrinkwrap":false,"publish_time":1629820806657,"_cnpm_publish_time":1629820806657,"_cnpmcore_publish_time":"2021-12-15T22:40:55.343Z"},"1.3.0":{"name":"pin-github-action","version":"1.3.0","description":"Pin your GitHub Actions to specific versions automatically!","main":"index.js","scripts":{"test":"jest","lint":"eslint *.js","lint-fix":"eslint --fix *.js"},"keywords":["github actions","github","security"],"author":{"name":"Michael Heap","email":"m@michaelheap.com"},"license":"MIT","devDependencies":{"eslint":"^6.8.0","eslint-plugin-prettier":"^3.1.2","jest":"^24.9.0","nock":"^11.7.0","prettier":"^1.19.1"},"dependencies":{"@octokit/rest":"^16.35.2","commander":"^4.0.1","matcher":"^4.0.0","yaml":"^1.7.2"},"bin":{"pin-github-action":"bin.js"},"gitHead":"261703c6c6735fd6d4f539c6b3053e13501bdb7a","_id":"pin-github-action@1.3.0","_nodeVersion":"12.22.1","_npmVersion":"6.14.12","dist":{"shasum":"b82e1628a7fd62bf405d689c5a01254b08235a8f","size":7099,"noattachment":false,"key":"/pin-github-action/-/pin-github-action-1.3.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/pin-github-action/download/pin-github-action-1.3.0.tgz"},"_npmUser":{"name":"mheap","email":"m@michaelheap.com"},"directories":{},"maintainers":[{"name":"mheap","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/pin-github-action_1.3.0_1623850702926_0.21145004064463624"},"_hasShrinkwrap":false,"publish_time":1623850703044,"_cnpm_publish_time":1623850703044,"_cnpmcore_publish_time":"2021-12-15T22:40:55.591Z"},"1.2.0":{"name":"pin-github-action","version":"1.2.0","description":"Pin your GitHub Actions to specific versions automatically!","main":"index.js","scripts":{"test":"jest","lint":"eslint *.js","lint-fix":"eslint --fix *.js"},"keywords":["github actions","github","security"],"author":{"name":"Michael Heap","email":"m@michaelheap.com"},"license":"MIT","devDependencies":{"eslint":"^6.8.0","eslint-plugin-prettier":"^3.1.2","jest":"^24.9.0","nock":"^11.7.0","prettier":"^1.19.1"},"dependencies":{"@octokit/rest":"^16.35.2","commander":"^4.0.1","matcher":"^4.0.0","yaml":"^1.7.2"},"bin":{"pin-github-action":"bin.js"},"gitHead":"5d8bff214c6a2d18c3a35b892ff0cf9d3f6ccb16","_id":"pin-github-action@1.2.0","_nodeVersion":"12.22.1","_npmVersion":"6.14.12","dist":{"shasum":"1fb5fb1368f06ac1faadf612121431a84d00e735","size":6741,"noattachment":false,"key":"/pin-github-action/-/pin-github-action-1.2.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/pin-github-action/download/pin-github-action-1.2.0.tgz"},"_npmUser":{"name":"mheap","email":"m@michaelheap.com"},"directories":{},"maintainers":[{"name":"mheap","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/pin-github-action_1.2.0_1622016875349_0.6866437227778237"},"_hasShrinkwrap":false,"publish_time":1622016875485,"_cnpm_publish_time":1622016875485,"_cnpmcore_publish_time":"2021-12-15T22:40:55.826Z"},"1.1.3":{"name":"pin-github-action","version":"1.1.3","description":"Pin your GitHub Actions to specific versions automatically!","main":"index.js","scripts":{"test":"jest","lint":"eslint *.js","lint-fix":"eslint --fix *.js"},"keywords":["github actions","github","security"],"author":{"name":"Michael Heap","email":"m@michaelheap.com"},"license":"MIT","devDependencies":{"eslint":"^6.8.0","eslint-plugin-prettier":"^3.1.2","jest":"^24.9.0","nock":"^11.7.0","prettier":"^1.19.1"},"dependencies":{"@octokit/rest":"^16.35.2","commander":"^4.0.1","matcher":"^4.0.0","yaml":"^1.7.2"},"bin":{"pin-github-action":"bin.js"},"gitHead":"20a5452df13b0adb19db1b17a79551c7f355bd29","_id":"pin-github-action@1.1.3","_nodeVersion":"12.21.0","_npmVersion":"6.14.11","dist":{"shasum":"36ffac71463bfa44db0abc378674631c73d39833","size":6463,"noattachment":false,"key":"/pin-github-action/-/pin-github-action-1.1.3.tgz","tarball":"http://registry.cnpm.dingdandao.com/pin-github-action/download/pin-github-action-1.1.3.tgz"},"_npmUser":{"name":"mheap","email":"m@michaelheap.com"},"directories":{},"maintainers":[{"name":"mheap","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/pin-github-action_1.1.3_1615133230539_0.07138640291296472"},"_hasShrinkwrap":false,"publish_time":1615133230666,"_cnpm_publish_time":1615133230666,"_cnpmcore_publish_time":"2021-12-15T22:40:56.087Z"},"1.1.2":{"name":"pin-github-action","version":"1.1.2","description":"Pin your GitHub Actions to specific versions automatically!","main":"index.js","scripts":{"test":"jest","lint":"eslint *.js","lint-fix":"eslint --fix *.js"},"keywords":["github actions","github","security"],"author":{"name":"Michael Heap","email":"m@michaelheap.com"},"license":"MIT","devDependencies":{"eslint":"^6.8.0","eslint-plugin-prettier":"^3.1.2","jest":"^24.9.0","nock":"^11.7.0","prettier":"^1.19.1"},"dependencies":{"@octokit/rest":"^16.35.2","commander":"^4.0.1","matcher":"^3.0.0","yaml":"^1.7.2"},"bin":{"pin-github-action":"bin.js"},"gitHead":"56c4df5114a6ceb90ab2b16e8a3d56afbf0b3c22","_id":"pin-github-action@1.1.2","_nodeVersion":"12.20.0","_npmVersion":"6.14.8","dist":{"shasum":"32cb0d62c6a9bbda20f78e3762f6d846c0e1babd","size":6462,"noattachment":false,"key":"/pin-github-action/-/pin-github-action-1.1.2.tgz","tarball":"http://registry.cnpm.dingdandao.com/pin-github-action/download/pin-github-action-1.1.2.tgz"},"_npmUser":{"name":"mheap","email":"m@michaelheap.com"},"directories":{},"maintainers":[{"name":"mheap","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/pin-github-action_1.1.2_1607104262818_0.23584019268363643"},"_hasShrinkwrap":false,"publish_time":1607104262950,"_cnpm_publish_time":1607104262950,"_cnpmcore_publish_time":"2021-12-15T22:40:56.343Z"},"1.1.1":{"name":"pin-github-action","version":"1.1.1","description":"Pin your GitHub Actions to specific versions automatically!","main":"index.js","scripts":{"test":"jest","lint":"eslint *.js","lint-fix":"eslint --fix *.js"},"keywords":["github actions","github","security"],"author":{"name":"Michael Heap","email":"m@michaelheap.com"},"license":"MIT","devDependencies":{"eslint":"^6.8.0","eslint-plugin-prettier":"^3.1.2","jest":"^24.9.0","nock":"^11.7.0","prettier":"^1.19.1"},"dependencies":{"@octokit/rest":"^16.35.2","commander":"^4.0.1","matcher":"^3.0.0","yaml":"^1.7.2"},"bin":{"pin-github-action":"bin.js"},"gitHead":"3071a72124ac66bcdc29965727933fcb10d0dcfa","_id":"pin-github-action@1.1.1","_nodeVersion":"12.19.0","_npmVersion":"6.14.8","dist":{"shasum":"9419fa831495b429a0c1eb72a0af279a0fff1750","size":6406,"noattachment":false,"key":"/pin-github-action/-/pin-github-action-1.1.1.tgz","tarball":"http://registry.cnpm.dingdandao.com/pin-github-action/download/pin-github-action-1.1.1.tgz"},"_npmUser":{"name":"mheap","email":"m@michaelheap.com"},"directories":{},"maintainers":[{"name":"mheap","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/pin-github-action_1.1.1_1605194949502_0.16467007614341833"},"_hasShrinkwrap":false,"publish_time":1605194949669,"_cnpm_publish_time":1605194949669,"_cnpmcore_publish_time":"2021-12-15T22:40:56.554Z"},"1.1.0":{"name":"pin-github-action","version":"1.1.0","description":"Pin your GitHub Actions to specific versions automatically!","main":"index.js","scripts":{"test":"jest","lint":"eslint *.js","lint-fix":"eslint --fix *.js"},"keywords":["github actions","github","security"],"author":{"name":"Michael Heap","email":"m@michaelheap.com"},"license":"MIT","devDependencies":{"eslint":"^6.8.0","eslint-plugin-prettier":"^3.1.2","jest":"^24.9.0","nock":"^11.7.0","prettier":"^1.19.1"},"dependencies":{"@octokit/rest":"^16.35.2","commander":"^4.0.1","matcher":"^3.0.0","yaml":"^1.7.2"},"bin":{"pin-github-action":"bin.js"},"gitHead":"783d957ec8df0f42a3a77d753df0cffd59dc8d8e","_id":"pin-github-action@1.1.0","_nodeVersion":"12.19.0","_npmVersion":"6.14.8","dist":{"shasum":"1755b9a7e2831b38055fe67463b7836453d3d18d","size":6375,"noattachment":false,"key":"/pin-github-action/-/pin-github-action-1.1.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/pin-github-action/download/pin-github-action-1.1.0.tgz"},"_npmUser":{"name":"mheap","email":"m@michaelheap.com"},"directories":{},"maintainers":[{"name":"mheap","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/pin-github-action_1.1.0_1605043520362_0.9120714689688252"},"_hasShrinkwrap":false,"publish_time":1605043520516,"_cnpm_publish_time":1605043520516,"_cnpmcore_publish_time":"2021-12-15T22:40:56.742Z"},"1.0.2":{"name":"pin-github-action","version":"1.0.2","description":"Pin your GitHub Actions to specific versions automatically!","main":"index.js","scripts":{"test":"jest","lint":"eslint *.js","lint-fix":"eslint --fix *.js"},"keywords":["github actions","github","security"],"author":{"name":"Michael Heap","email":"m@michaelheap.com"},"license":"MIT","devDependencies":{"eslint":"^6.8.0","eslint-plugin-prettier":"^3.1.2","jest":"^24.9.0","nock":"^11.7.0","prettier":"^1.19.1"},"dependencies":{"@octokit/rest":"^16.35.2","commander":"^4.0.1","yaml":"^1.7.2"},"bin":{"pin-github-action":"bin.js"},"gitHead":"4cf1ae4c6f9c69139cd8414374bbf918bb30ccea","_id":"pin-github-action@1.0.2","_nodeVersion":"12.19.0","_npmVersion":"6.14.8","dist":{"shasum":"30e511e05701ff51ebd1995726eb446f8025d647","size":5341,"noattachment":false,"key":"/pin-github-action/-/pin-github-action-1.0.2.tgz","tarball":"http://registry.cnpm.dingdandao.com/pin-github-action/download/pin-github-action-1.0.2.tgz"},"_npmUser":{"name":"mheap","email":"m@michaelheap.com"},"directories":{},"maintainers":[{"name":"mheap","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/pin-github-action_1.0.2_1604850567907_0.3443792856132333"},"_hasShrinkwrap":false,"publish_time":1604850568059,"_cnpm_publish_time":1604850568059,"_cnpmcore_publish_time":"2021-12-15T22:40:56.949Z"},"1.0.1":{"name":"pin-github-action","version":"1.0.1","description":"Pin your GitHub Actions to specific versions automatically!","main":"index.js","scripts":{"test":"jest","lint":"eslint *.js","lint-fix":"eslint --fix *.js"},"keywords":["github actions","github","security"],"author":{"name":"Michael Heap","email":"m@michaelheap.com"},"license":"MIT","devDependencies":{"eslint":"^6.8.0","eslint-plugin-prettier":"^3.1.2","jest":"^24.9.0","nock":"^11.7.0","prettier":"^1.19.1"},"dependencies":{"@octokit/rest":"^16.35.2","commander":"^4.0.1","yaml":"^1.7.2"},"bin":{"pin-github-action":"bin.js"},"gitHead":"b52b939145b805c40ecb433f0ef29feb9df8334d","_id":"pin-github-action@1.0.1","_nodeVersion":"12.14.0","_npmVersion":"6.13.4","dist":{"shasum":"c4f6745f5a39583d99004dd38b2bbf043e95a121","size":4787,"noattachment":false,"key":"/pin-github-action/-/pin-github-action-1.0.1.tgz","tarball":"http://registry.cnpm.dingdandao.com/pin-github-action/download/pin-github-action-1.0.1.tgz"},"maintainers":[{"name":"mheap","email":""}],"_npmUser":{"name":"mheap","email":"m@michaelheap.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/pin-github-action_1.0.1_1579017298359_0.3633297489485978"},"_hasShrinkwrap":false,"publish_time":1579017298532,"_cnpm_publish_time":1579017298532,"_cnpmcore_publish_time":"2021-12-15T22:40:57.149Z"},"1.0.0":{"name":"pin-github-action","version":"1.0.0","description":"Pin your GitHub Actions to specific versions automatically!","main":"index.js","scripts":{"test":"jest","lint":"eslint *.js","lint-fix":"eslint --fix *.js"},"keywords":["github actions","github","security"],"author":{"name":"Michael Heap","email":"m@michaelheap.com"},"license":"MIT","devDependencies":{"eslint":"^6.8.0","eslint-plugin-prettier":"^3.1.2","jest":"^24.9.0","nock":"^11.7.0","prettier":"^1.19.1"},"dependencies":{"@octokit/rest":"^16.35.2","commander":"^4.0.1","yaml":"^1.7.2"},"bin":{"pin-github-action":"bin.js"},"gitHead":"49c91d1b1dc21253ce1c762983762310b7473299","_id":"pin-github-action@1.0.0","_nodeVersion":"12.14.0","_npmVersion":"6.13.4","dist":{"shasum":"ea0a38fa39a061a1db7867981216a375e716269a","size":4782,"noattachment":false,"key":"/pin-github-action/-/pin-github-action-1.0.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/pin-github-action/download/pin-github-action-1.0.0.tgz"},"maintainers":[{"name":"mheap","email":""}],"_npmUser":{"name":"mheap","email":"m@michaelheap.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/pin-github-action_1.0.0_1579017202776_0.25612404603593864"},"_hasShrinkwrap":false,"publish_time":1579017202998,"_cnpm_publish_time":1579017202998,"_cnpmcore_publish_time":"2021-12-15T22:40:57.357Z"}},"readme":"# pin-github-action\n\nThis is a tool that allows you to pin your GitHub actions dependencies to a\nspecific sha without requiring that you update every action manually each time\nyou want to use a newer version of an action.\n\nIt achieves this by converting your workflow to use a specific commit hash,\nwhilst adding the original value as a comment on that line. This allows us to\nresolve newer shas for that target ref automatically in the future.\n\nIt converts this:\n\n```yaml\nname: Commit Push\non:\n  push:\n    branches:\n      - master\njobs:\n  build:\n    name: nexmo/github-actions/submodule-auto-pr@main\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@main\n      - name: nexmo/github-actions/submodule-auto-pr\n        uses: nexmo/github-actions/submodule-auto-pr@main\n```\n\nIn to this:\n\n```yaml\nname: Commit Push\non:\n  push:\n    branches:\n      - master\njobs:\n  build:\n    name: nexmo/github-actions/submodule-auto-pr@main\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@db41740e12847bb616a339b75eb9414e711417df # pin@main\n      - name: nexmo/github-actions/submodule-auto-pr\n        uses: nexmo/github-actions/submodule-auto-pr@73549280c1c566830040d9a01fe9050dae6a3036 # pin@main\n```\n\nFor more information, see [How it works](#how-it-works).\n\n## Installation\n\n```\nnpm install -g pin-github-action\n```\n\n## Usage\n\n```bash\npin-github-action /path/to/.github/workflows/your-name.yml\n```\n\nIf you use private actions (or are hitting rate limits), you'll need to provide\na GitHub access token:\n\n```bash\nGH_ADMIN_TOKEN=<your-token-here> pin-github-action /path/to/.github/workflows/your-name.yml\n```\n\nRun it as many times as you like! Each time you run the tool the exact sha will\nbe updated to the latest available sha for your pinned ref.\n\nIf you're having issues, run with debug logging enabled and open an issue:\n\n```bash\nDEBUG=\"pin-github-action*\" pin-github-action /path/to/.github/workflows/your-name.yml\n```\n\nYou can process multiple files at once by adding additional files as arguments: \n\n```bash\npin-github-action first.yml second.yml \n```\n\n## Leaving Actions unpinned\n\nTo leave an action unpinned, pass the `--allow` option when running `pin-github-action`.\n\nRunning `pin-github-action /path/to/.github/workflows/your-name.yml --allow \"actions/*\"` will turn this:\n\n```yaml\njobs:\n  build:\n    name: nexmo/github-actions/submodule-auto-pr@main\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@main\n      - uses: nexmo/github-actions/submodule-auto-pr@main\n```\n\nInto this (notice how `actions/checkout@main` is ignored):\n\n```yaml\njobs:\n  build:\n    name: nexmo/github-actions/submodule-auto-pr@main\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@main\n      - name: nexmo/github-actions/submodule-auto-pr\n        uses: nexmo/github-actions/submodule-auto-pr@73549280c1c566830040d9a01fe9050dae6a3036 # pin@main\n```\n\nYou can pass multiple actions to allow as a comma separated list e.g. `actions/checkout,mheap/*`\n\nA quick overview of the available globbing patterns (taken from [multimatch](https://github.com/sindresorhus/multimatch), which we use to match globs):\n\n- `*` matches any number of characters, but not `/`\n- `?` matches a single character, but not `/`\n- `**` matches any number of characters, including `/`, as long as it's the only thing in a path part\n- `{}` allows for a comma-separated list of \"or\" expressions\n- `!` at the beginning of a pattern will negate the match\n\nExamples:\n\n- Exact match: `actions/checkout`\n- Partial match: `actions/*`\n- Negated match: `!actions/*` (will only pin `actions/*` actions)\n\n## Customising the pin@{ref} comment\n\nYou can specify a comment containing the `{ref}` placeholder to customise the comment added.\n\nTo add [support for renovate](https://github.com/mheap/pin-github-action/issues/140), run with the following options (note the leading space):\n\n```bash\npin-github-action -c \" {ref}\" /path/to/workflow.yaml\n```\n\n## How it works\n\n- Load the workflow file provided\n- Tokenise it in to an AST\n- Extract all `uses` steps, skipping any `docker://` or `./local-path` actions\n- Loop through all `uses` steps to determine the target ref\n  - If there's a comment in the step, remove `pin@` and use that as the target\n  - Otherwise, fall back to the ref in the action as the default\n- Look up the current sha for each repo on GitHub and update the action to use the specific hash\n  - If needed, add a comment with the target pinned version\n- Write the workflow file with the new pinned version and original target version as a comment","_attachments":{},"license":"MIT"}