actionpin

GitHub Actions supply-chain hardener: audit workflows for unpinned actions and build a SHA pin plan.