github / github/roadmap

Locked Dependencies for GitHub Actions Workflows [Public Preview]

Open
#1,253 0 comments 0 reactions 0 assignees View on GitHub
cloud Enterprise Free Public Preview Team
Dominant language
No language data
Stars
8.9k
Forks
1.8k
PR merge metrics
No merged PRs in 30d

Description

### Value Prop
You can now lock the exact versions of all actions and their dependencies directly in your workflow files. This gives you clear visibility into what code is running in your CI/CD pipelines, helps you catch changes before they happen, and ensures every workflow run is consistent and secure.

### Expected Outcome
By making dependencies explicit and verifiable, teams can trust that workflows will run the same way every time, with no surprises from hidden updates or transitive changes. This approach boosts reliability, makes reviews easier, and strengthens supply chain security for your automation at scale.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.