Workflow dependency lockfiles
A lockfile pins every action your workflows depend on to a verified commit, so the code you reviewed is the code that runs.
Heads up: this looks like a sales page. Look closely before you buy or sign up for anything.
Quick read
This page explains GitHub Actions workflow dependency lockfiles and how they pin actions to verified commit SHAs. Someone would visit to learn how lockfiles ensure reproducible, reviewable, and auditable action code for workflows.
- Pins every action dependency to a specific commit SHA
- Covers transitive action dependencies but not reusable workflow calls
- Lockfile is generated by gh actions-lock and must not be hand edited
Reactions
No reactions yet. Record a short about this link and it shows up here, in Reels and in the community feed.
Is docs.github.com your site? Sign in to verify it and get a Verified badge, full stats and a link-back badge.
What we found on this site
- Google safety check
- No threats found
From public records. See how the rest of the web compares in the NexURLs Internet Report.
Sites like Workflow dependency lockfiles
- global-lawgithub.com
A GitHub repository that assembles the laws of many countries into a single git history, where each country's law is a...
- Inside GitHub's new Git storage architecturegithub.blog
A technical overview of GitHub’s new Git storage architecture, “Project Rubicon,” designed to handle thousands of...
- What's Wrong with GitHubgnu.org
This site critiques GitHub's practices and encourages developers to avoid it. It highlights issues like nonfree...
- Offrun - manage every coding agent from one workspaceoffrun.dev
Offrun is a free Mac app that runs multiple coding agents (Claude Code, Codex, Antigravity, Grok Build, Muse Code)...
- Securing the AI Harness: Security in the Agentic Lifecyclecode-maven.com
A lecture-style article about security risks introduced by the surrounding infrastructure of AI agents and how...
- DevDocsdevdocs.io
More Tech & AI finds
- Playing with the STM32MP2serd.es
- Virtualized Redox: from Virtio-FS to Cloud Hypervisor, and beyondredox-os.org
- Nspawn 3.0: A Docker-compatible Engine API for systemd-nspawn containersblog.nspawn.org
- BUGATTI BUILT A TV THAT UNFOLDS IN 45 SECONDS.youtube.com
- Marketur MCP WordPress Plugin for ChatGPT and Claudenexurls.com/@nexurls
- GhostMap: The Android flaw that crashes your phone before you open the appbitdefender.com
Feeling lucky? Try the random website generator.
Where people went next
Nobody has added a next stop yet. Be the first.