日本語のみで絞り込む
A lockfile pins every action your workflows depend on to a verified commit, so the code you reviewed is the code that runs.
2026/10/14 -Lockfiles help protect against unexpected dependency changes by keeping workflow runs tied to the commits you locked. Locking does not determine ...
This project provides the shared, authoritative lockfile format that GitHub Actions tooling uses to record and verify resolved dependency pins. It is part of ...
2日前 -A lockfile guarantees that runs use the commits you locked, but it does not determine whether those commits are safe, and the announcement ...
3日前 -A gh CLI extension that generates and verifies the GitHub Actions dependency lockfile, pinning every action your workflows use to an exact ...
1. Pilot the "Require lockfile" policy · 2. Keep lockfiles current · 3. Set up a review process for lockfile changes · 4. Enforce the policy.
2026/10/27 -Use GitHub Actions workflow lockfiles to pin action dependencies, review updates, and reduce supply-chain risk in CI.
5日前 -The introduction of workflow dependency lockfiles is an interesting step towards making CI/CD workflows more reproducible and secure. I wrote ...
2026/11/1 -On October 14, GitHub put workflow dependency lockfiles in public preview, Free and Team plans included: one file that pins every action, ...
2026/10/28 -Lockfiles let you keep readable tag and branch references in your workflows while running the exact commits you locked, even if those references ...