[TheBruceHimself]

i’m a bit lost. I think I get what it does but what’s it for? I’ve never had the need to convert a tag to a hash and that hash to a tag.

[thombashi]

For example, pin actions to a commit SHA associated with a git tag to follow the security best practices of GitHub actions. https://docs.github.com/en/actions/security-guides/security-...