Which choices represent best practices for publishing actions so that they can be consumed reliably? (Each correct answer presents a complete solution. Choose two.)

The correct answer is B. commit SHA D. tag. When consuming or publishing GitHub Actions, reliability requires pinning to an immutable reference. A commit SHA (Option B, e.g., uses: actions/checkout@abc1234) is the most secure option - it cannot be changed, moved, or deleted, ensuring the exact code is always used. A…

Create and manage custom actions

Question

Options

Adefault branch
Bcommit SHA
Crepo name
Dtag
Eorganization name

How the community answered

(43 responses)

A
2% (1)
B
74% (32)
C
9% (4)
E
14% (6)

Explanation

When consuming or publishing GitHub Actions, reliability requires pinning to an immutable reference. A commit SHA (Option B, e.g., uses: actions/checkout@abc1234) is the most secure option - it cannot be changed, moved, or deleted, ensuring the exact code is always used. A version tag (Option D, e.g., uses: actions/checkout@v4) is a best practice for stable, human-readable pinning and follows semantic versioning. Option A (default branch) is mutable and changes with every commit, making it unreliable. Options C and E (repo name and organization name) are not valid reference types for actions pinning.

Topics

#GitHub Actions#Action Versioning#Reliable Consumption#Best Practices

Community Discussion

No community discussion yet for this question.

Full GH-200 Practice