[Feature] pin actions digest

[viceice]

Is this feature missing in the latest version?

• I'm using the latest release

Is your feature request related to a problem? Please describe.

git-cliff/action.yml

Line 40 in 26b573a

uses: tj-actions/setup-bin@v1.2.3

action isn't pinned, yo my workflow is failing

The action tj-actions/setup-bin@v1.2.3 is not allowed in visualon/featureide.net because all actions must be pinned to a full-length commit SHA.

Describe the solution you'd like?

pin the action with a digest (renovate can do it for you)

Describe alternatives you've considered?

switch to official action orhun/git-cliff-action

Anything else?

No response

Code of Conduct

• I agree to follow this project's Code of Conduct

[viceice]

when allowing unpinned sha, then i get this error:

Error: GitError(Error { code: -3, klass: 9, message: "object not found - cannot read header for (0a16e84c5dfd344efe7e38fdef688cc5d49d15c7)" })

probably related to wrong arch?

Downloading the latest release
VERSION: v2.13.1
INPUT_ADD_PREFIX_TO_VERSION: false
OS: linux
ARCH: x86_64
Checking for file: git-cliff-2.13.1-x86_64-unknown-linux-musl.tar.gz
Found file: git-cliff-2.13.1-x86_64-unknown-linux-musl.tar.gz
Found checksum file: git-cliff-2.13.1-x86_64-unknown-linux-musl.tar.gz.sha512
Downloading https://github.com/orhun/git-cliff/releases/download/v2.13.1/git-cliff-2.13.1-x86_64-unknown-linux-musl.tar.gz
Downloading https://github.com/orhun/git-cliff/releases/download/v2.13.1/git-cliff-2.13.1-x86_64-unknown-linux-musl.tar.gz.sha512
Checksum verification passed
Found binary: /tmp/tmp.AW3kQ11shV/git-cliff-2.13.1/git-cliff

[viceice]

git error is an upstream bug

• Commit statistics breaks with git checkout --filter=blob:none orhun/git-cliff#1521