sethvargo / ratchet

A tool for securing CI/CD workflows with version pinning.
Apache License 2.0
772 stars 32 forks source link

Add "exclude" annotation #2

Closed sethvargo closed 2 years ago

sethvargo commented 2 years ago

There might be legitimate scenarios to always pin to the floating tag. For example, you might have two GitHub Actions that depend on each other, and you always want to integration test against HEAD.

Design

uses: 'foo/bar@v2` # ratchet:exclude

Where exclude is a new special keyword that tells Ratchet to ignore the given reference and leave it as-is.