Audit how 68 real GitHub Actions workflows from seven projects pin their actions (SHA, tag, branch, local…

Audit how 68 real GitHub Actions workflows from seven projects pin their actions (SHA, tag, branch, local…: a task in pool-desk (Harbor dataset). Hi, for our supply-chain review I need to know how the GitHub Actions workflows we vendor from seven upstream projects pin the actions they use.