Unit 5: Hashing and file integrity · Lesson 5 of 5 · 20 min Pro

Case file: pin what your pipeline runs

Audit GitHub workflows for third-party actions referenced by movable tags, and for triggers that hand secrets to untrusted code.