shana on Nostr: Users aren't "failing to follow best practices"; GitHub's own examples and guidance ...

Users aren't "failing to follow best practices"; GitHub's own examples and guidance for using Actions tells users to use a tag, not a commit hash. Using a hash is definitely safer and I wouldn't be surprised if GitHub quietly changed their guidance, but it's certainly not a best practice that has been widely given to users.