pinact

Runs as pinact|macOS, Linux, Windows|github.com

Command form

ai-draft · 2 tasks · 6 fields

Pin GitHub Actions and reusable workflows to commit SHAs, or check that they are pinned. Token handling and SARIF output are left out.

Opens the form; the finished command lands at your prompt, unrun

Run in Otty

otty gui pinact

`pinact run`

Pin actions in workflows

Pin actions in workflowsExample values, fixed in this page — nothing here reaches a terminal

Basic

Workflow files

file

Update actions

--update

TasksEach one presets the form for one job

Pin all actions

filesupdate

Check in CI

filescheckno_api

ParametersOnly these flags are editable in the form

Workflow files

Defaults to the repository's workflow and action files when empty.
path · positional 0 · repeatable

Check only

Report unpinned actions without editing files.
boolean

--check

Update actions

boolean

--update

Verify version comments

boolean

--verify-comment

Pin branches

boolean

--branch-to-tag

Offline check

boolean

--no-api

SourcesEvery flag above is checked against these

docs

pinact run [<workflow file>...] pinact run README.md pinact run --check - [Check without editing files](check.md): `--check`, `--fix=false`, `--no-api` - [Update actions](update.md): `--update`, `--min-age`, `--verify-min-age` - [Verify version comments](codes/001.md): `--verify-comment` - [Pin branches](branch_to_tag.md): `--branch-to-tag` - [Include and ex…

manual2026-10-27

github.com

Before it fills your prompt, Otty checks the installed pinact against its version. A form that does not match your version is not offered.