Locked Dependencies for GitHub Actions Workflows [Public Preview]
Open
cloud
Enterprise
Free
Public Preview
Team
- Dominant language
- No language data
- Stars
- 8.9k
- Forks
- 1.8k
- PR merge metrics
- No merged PRs in 30d
Description
### Value Prop
You can now lock the exact versions of all actions and their dependencies directly in your workflow files. This gives you clear visibility into what code is running in your CI/CD pipelines, helps you catch changes before they happen, and ensures every workflow run is consistent and secure.
### Expected Outcome
By making dependencies explicit and verifiable, teams can trust that workflows will run the same way every time, with no surprises from hidden updates or transitive changes. This approach boosts reliability, makes reviews easier, and strengthens supply chain security for your automation at scale.
Contributor guide
Assessment
This issue has not been assessed yet.