日本語のみで絞り込む
This project provides the shared, authoritative lockfile format that GitHub Actions tooling uses to record and verify resolved dependency pins. It is part of ...
2026/10/14 -Lockfiles help protect against unexpected dependency changes by keeping workflow runs tied to the commits you locked. Locking does not determine ...
3日前 -A gh CLI extension that generates and verifies the GitHub Actions dependency lockfile, pinning every action your workflows use to an exact ...
A lockfile pins every action your workflows depend on to a verified commit, so the code you reviewed is the code that runs.
2025/12/15 -Generate and verify lockfiles for GitHub Actions dependencies. Pins all actions (including transitive dependencies) to the exact commit SHAs ...
2日前 -A lockfile guarantees that runs use the commits you locked, but it does not determine whether those commits are safe, and the announcement ...
1. Check your action references · 2. Install the actions-lock extension · 3. Generate the lockfile · 4. Review the changes and commit · 5. Keep the lockfile current.
2026/11/1 -On October 14, GitHub put workflow dependency lockfiles in public preview, Free and Team plans included: one file that pins every action, ...
5日前 -GitHub Actions now supports dependency lockfiles ... We often talk about securing the software supply chain in terms of application dependencies.
2026/10/27 -Use GitHub Actions workflow lockfiles to pin action dependencies, review updates, and reduce supply-chain risk in CI.