GitHub Actions supply-chain hardener: audit workflows for unpinned actions and build a SHA pin plan.
Maintain this server? Claim it
This server only runs locally, from a package. Install it with the instructions on this page to try it.
We don't run packages, so we can't list this server's tools.