How to: Secure your GitHub Actions across multiple repos, with automated actions pinning

To secure GitHub Actions, a common practice is to pin an action to a specific commit SHA, or checksum. For developers, it's manual work to do that pinning, and to figure out what actions are being used in your project. Minder, an open source platform for managing security policies across your GitHub repos, makes it easier to automatically parse all of your GitHub Actions workflows across your GitHub repos, and replace the needed tags for the commit checksum. This means that you don't need to go and fetch the checksum for each and every action referenced in your workflows.