What is the most secure way to reference a third-party action in a workflow?

AUse the default branch name

BUse a moving major tag such as v1

CPin the action to a full commit SHA

DUse the most recent pull request merge commit

More Secure and optimize automation Questions

28 questions

Full GitHub Actions Practice Test

All topics covered

All GitHub Actions Questions

Browse by topic

Related Questions

Why do GitHub Actions workflows use OpenID Connect with cloud providers?...

easy

What do artifact attestations help software consumers verify?...

easy

A workflow author wants to run a step only when a secret exists. What should they do?...

medium

A workflow runs for a pull request from a forked repository. Which credential behavior should the ma...

medium

A caller workflow wants a reusable workflow to use one of the caller's secrets. What must the caller...

medium

View all Secure and optimize automation questions

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.