check-incorrect-action-pinning.yaml

name: 🧪 Check Version Pinning

on:
  push:
    branches:
      - main
  pull_request:
  workflow_dispatch:

jobs:
  check-version-pinning:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis

      - name: Check for unpinned Actions
        uses: ministryofjustice/github-actions/check-version-pinning@ccf9e3a4a828df1ec741f6c8e6ed9d0acaef3490 # v18.5.0
        with:
          workflow_directory: ".github/workflows"
          scan_mode: "full"