Floating tags can move after you adopt them. For supply-chain hygiene, pin garnet-org/action to the commit SHA from the current GitHub Release (same artifact as the Marketplace listing).
Latest release tag: v2 · Published Thu, 12 Mar 2026 21:47:59 GMT
Recommended uses: line
uses: garnet-org/action@2b7fc9d79b54f551b43358c27424a36064b3e078 # GitHub Release v2
Full SHA: 2b7fc9d79b54f551b43358c27424a36064b3e078
Machine-readable: /pins.txt (for docs, onboarding, and agents). Cached data revalidates about hourly, or immediately when the Action repo triggers POST /api/revalidate-pins (GitHub Release webhook — see project env docs).