gha-hashpinner is an open-source CLI tool that updates GitHub Actions configurations to use hashpins instead of mutable pins, enhancing security and Dependabot compatibility for CI/CD workflows.
gha-hashpinner sits in PulseGate's CLI tools & terminal category. It focuses on improving security and reliability of GitHub Actions by automating hashpin updates in workflows. It is built as an open-source project for devOps engineers and GitHub Actions users. gha-hashpinner is open source under the BSD-3-Clause license. It ships for the command line.
Behind gha-hashpinner is mfisher87, and it first shipped in 2026. Development happens publicly on GitHub with 15 commits in the last 90 days. Among its 4 catalogued features are hashpin updates, dependabot compatibility, and GitHub Actions integration.
Summary written by a language model from the project’s public pages.
What PulseGate has recorded for this listing
Closest matches by what these projects do