AZ400-Q: use a third-party pipeline action
A workflow needs an external action. What reduces supply-chain risk most?
- A) Reference its mutable
latesttag. - B) Review it and pin it to a trusted immutable version or commit, with approved update process. ✓
- C) Copy its code into every workflow without review.
- D) Give it an owner token automatically. Answer: B. Immutable pinning and review make what executes explicit. Why not the others: Mutable references and broad credentials increase exposure.