Add note about full-length SHA

This commit is contained in:
David Tolnay 2025-08-22 17:21:50 -07:00
parent 57e40976e0
commit ed196ec4b4
No known key found for this signature in database
GPG key ID: F9BA143B95FF6D82

View file

@ -99,6 +99,18 @@ compiler support.
<br>
## Choice of full-length commit SHA
In a workflow that [pins the action][pin] using a full-length commit SHA (as
opposed to something like @nightly or @1.89.0) it is required that you pick a
SHA that is within the history of the master branch. Any commit that is not
within the history of master will eventually get garbage-collected and your
workflows will fail.
[pin]: https://docs.github.com/en/actions/reference/security/secure-use#using-third-party-actions
<br>
## License
The scripts and documentation in this project are released under the [MIT