Pinning an action: commit SHA vs tag vs branch
This sheet compares Full commit SHA, Version tag, Branch name.
| Criterion | Full commit SHA | Version tag | Branch name |
|---|---|---|---|
| Immutability | Fixed to one exact commit; the only guarantee the code cannot change | Movable by the publisher unless immutable releases are enabled | Most mutable; moves with every new commit |
The verdict, the full comparison, 5 rules and 2 traps are part of GH-200 access. Unlock GH-200.