pre-commit: pin dependencies with --freeze

· Thiago Perrotta · March 20, 2025, 5:42 p.m.
pre-commit dependency management supply chain security Open Source Tools
Summary
The blog post discusses the use of the `--freeze` option in the pre-commit autoupdate command, which replaces git tags with SHAs for upstream hooks, thus enhancing security against supply-chain attacks. It provides a practical guide for developers on how to implement this feature while updating dependencies in their pre-commit configuration.
Read full post on perrotta.dev →
AUTHOR
Sponsored
Zulip logo Zulip
Organized team chat for people who take work seriously. Topic-based threading keeps conversations focused.
Try Zulip
Become a sponsor →