When calling an action from the marketplace such as actions/checkout@master, it is recommended practice to pin the action to a particular version such as actions/checkout@v1. This alleviates the risk of master introducing a breaking change or vulnerability.
The relevant workflow files are in the .github/workflow folders in the root directory and in the cookiecutter template directory.
When calling an action from the marketplace such as
actions/checkout@master, it is recommended practice to pin the action to a particular version such asactions/checkout@v1. This alleviates the risk ofmasterintroducing a breaking change or vulnerability.The relevant workflow files are in the
.github/workflowfolders in the root directory and in the cookiecutter template directory.