🧰 pinact

The items that name it 2

• [tl;dr sec] #344 - VMs won't contain Cyber-capable Agents, AWS AI Security Analyst, Decompilers vs LLMs
  article2026-09-08

  Converts GitHub Actions tag references to SHA pins; used by Semgrep's Leif Dreizler.

• The complete GitHub Actions security checklist
  article2026-05-11

  Used to keep pinned SHAs up to date for third-party actions.