What I mean is that there's a trivial workaround which does not require significant changes to the repository layout. On top of that, it does not change developer's workflows (they do not need to learn submodules)
On top of that, git submodules are NOT available for SVN repositories. >GitHub support for submodules provides an easy way for reviewer to see the exact code being added That works for trivial actions only. GitHub diff can't show the diff of 2-3 megebyte javascript files. GitHub can't diff Docker images and so on. >The sheer fact that you have not done it in your example 1) I am the owner of burrunan/gradle-cache-action, so it is more-or-less fine that I trust myself. If somebody takes over my GitHub id, then the issue with action sha is the least harmful thing.ΔΊ 2) Of course the references can be switched to commit ids, however, I am inclined to avoid combining multiple changes at once. Currently it is obvious that the tag is the same as before workaround. Vladimir