pin.
Resolve dependencies to immutable, pinned references
pin. turns Docker, GHCR, GitLab, GitHub Actions, npm, and PyPI references into immutable digests and SHAs. Paste a package.json, Dockerfile, workflow YAML, requirements file, or raw URL — tags lie, digests don’t.
Links:
