Verify github action SHA pinning

lesserwhirls · lesserwhirls · commit 72e39097cb65 · 2026-03-25T16:31:37.000-06:00
diff --git a/.github/workflows/verify-pinned-actions.yml b/.github/workflows/verify-pinned-actions.yml
@@ -0,0 +1,13 @@
+on:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  verify-pinned-actions:
+    name: Verify Pinned Actions
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: lesserwhirls/pinned-actions-verifier@c98821ec134694047ee7c8676a5282aad443cf8a
