メニュー
Update GitHub Actions to latest versions with SHA pinning using actions-up CLI
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
| name | sha-pin-actions |
| description | Update GitHub Actions to latest versions with SHA pinning using actions-up CLI |
| license | MIT |
Update GitHub Actions in workflows to use SHA-pinned versions for security and reproducibility.
Use actions-up CLI - scans workflows and composite actions, checks for updates, pins to exact commit SHAs.
npx actions-up -y
npx actions-up
npx actions-up --dry-run
npx actions-up --dir .gitea
npx actions-up --exclude "my-org/.*"
npx actions-up --min-age 7
.github/workflows/*.yml and .github/actions/*/action.yml# Before
- uses: actions/checkout@v3
- uses: actions/setup-node@v3
# After
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
# actions-up-ignore-next-line
- uses: actions/checkout@v3
- uses: actions/setup-node@v3 # actions-up-ignore
Use bearcli to safely read, search, edit, tag, archive, and organize Bear.app notes. Use when working with Bear notes, note IDs, Bear tags, migrations from Obsidian, note cleanup, or personal knowledge management in Bear.
Use rn-logs to read React Native Metro logs via CDP without MCP overhead. Default output is plain text and safe for non-interactive agent runs.
Automate iOS Simulator using AXe CLI. Use after implementing features to verify they work correctly via UI automation.
Review code changes for quality, security, performance, and maintainability. Use when reviewing PRs, diffs, or code files. Provides structured feedback with severity levels.
Create well-formatted git commits using Conventional Commits format. Use when committing changes, reviewing commit messages, or splitting changes into atomic commits.
Fetch source code for npm packages, Python packages, Rust crates, or GitHub repos to understand their implementation. Use when you need to explore a library's internals.