Ratchet is a tool for improving the security of CI/CD workflows by automating the process of pinning and unpinning upstream versions. It's like Bundler, Cargo, Go modules, NPM, Pip, or Yarn, but for CI/CD workflows. Ratchet supports GitHub Actions & Google Cloud Build.

WWW: https://github.com/sethvargo/ratchet
