This article details LinkedIn's efforts to upgrade its Static Application Security Testing (SAST) capabilities. It covers the challenges faced with legacy systems, the design principles guiding the modernization, and the implementation of a new GitHub Actions-based workflow to enhance security without disrupting developer productivity.

pinact is a command-line tool that helps you edit and pin versions of GitHub Actions and reusable workflows. It allows you to update versions, verify annotations, and create pull request reviews for better security and reliability in CI/CD pipelines.