Only 4% of organizations pin all public GitHub Actions to a specific version using commit hashes
May 27, 2026
Only 4% of organizations pin all public GitHub Actions to a specific version using commit hashes — This cybersecurity statistic was published by DataDog in May 2026. It covers topics including DevSecOps. The original data appears in State of DevSecOps. For the full methodology and detailed findings, refer to the original report.
Share or Copy this stat
Frequently Asked Questions
What does this statistic say?
Only 4% of organizations pin all public GitHub Actions to a specific version using commit hashes This data was published by DataDog and covers DevSecOps.
Where does this data come from?
This statistic comes from State of DevSecOps, published by DataDog on May 27, 2026. You can view the original report at https://www.datadoghq.com/state-of-devsecops/.
What cybersecurity topics does this cover?
This statistic relates to DevSecOps. Browse more statistics on DevSecOps or from DataDog.