Get the latest tech news
Whose code am I running in GitHub Actions?
I wanted to know what third-party code I was using in my GitHub Actions. I was able to use standard text processing tools and shell pipelines to get a quick tally.
Specifying an exact commit ID means the code won’t change unexpectedly, but tags are easier to read and compare. The `-0` flag tells it to split on the null byte, and then it runs grep to look for lines that include"uses:" – this is how you use an action in your workflow file. This step-by-step approach is how I build Unix text pipelines: I can write a step at a time, and gradually refine and tweak the output until I get the result I want.
Or read this on Hacker News