mirror of
https://github.com/Gitlawb/openclaude.git
synced 2026-08-28 18:24:55 -05:00
Pin all GitHub Actions to commit SHA instead of mutable version tags to prevent supply chain attacks via tag poisoning. This is especially important for third-party actions like oven-sh/setup-bun.