Umm one of the authors, Andy Gocke, is the lead for the .NET runtime... https://github.com/agocke

In case you’re interested in a potential successor: https://github.com/dotnet/designs/pull/147

I think that the messaging around this is going to be pretty important in heading off gut-reaction "it's all or nothing locked in to their world" first takes. It's probably attractive marketing for things to be aimed at "look how easy it easy to use our entire ecosystem", but there's a risk to that too.

Thanks for sharing that AWS doc

An interesting thought experiment would be a language/toolchain that would be permissive when generating debug builds, but hard-required warn-free to generate an optimized executable.

TIL thanks!

Check out F# "units of measure" ;)

hahaha :D

maybe it's worth adding that info to the blog post :)

thanks Jared and team, keep up the great work.

it is documented as recommended here fwiw: https://docs.github.com/en/actions/security-for-github-actio...

And the syntax to do that is to use `foo/bar@commitshagoeshere` as in

    - uses: RafaelGSS/bad-action@e20fd1d81b3f403df56f5f06e2aa9653a6a60763 # v1.0.1

(example from https://blog.rafaelgss.dev/why-you-should-pin-actions-by-com...)

This. Using tags is acceptable only for official GitHub actions, anything else should be pinned.