Per discussion on Slack with @viceice, changing the default from docker to semver-partial would allow: pinning to be out-of-the-box to SemVer versions, replacing helpers:pinGitHubActionDigestsToSem...