Chapter 9: GitHub Actions Hands-On
9.9b Pinning action versions
Prefer pinned major tags that you intentionally upgrade (actions/checkout@v4) rather than floating @master. When a supply-chain story hits the news, teams pin to full commit SHAs — know that pattern exists for later hardening.
Document in your README which workflows exist and what must be green before merge.