The [GitHub well-architected framework](https://wellarchitected.github.com/) is a high-quality resource for best practices around GitHub. We should reference the [section dedicated to pinning actions](https://wellarchitected.github.com/library/application-security/recommendations/actions-security/#pinning-actions-based-on-a-version-tag) by hash to add more credibility.
The GitHub well-architected framework is a high-quality resource for best practices around GitHub.
We should reference the section dedicated to pinning actions by hash to add more credibility.