mirror of
https://github.com/Gitlawb/openclaude.git
synced 2026-10-06 13:55:16 -04:00
Pin all GitHub Actions to commit SHA instead of mutable version tags to prevent supply chain attacks via tag poisoning. This is especially important for third-party actions like oven-sh/setup-bun.