Why do you think that https://github.com/zgosalvez/github-actions-ensure-sha-pinne is a good alternative to dependabot-sha-comment-ac
Why do you think that https://github.com/zgosalvez/github-actions-ensure-sha-pinne is a good alternative to dependabot-sha-comment-ac