github / github/roadmap

Locked Dependencies for GitHub Actions Workflows [GA]

Open
#1,268 0 comments 0 reactions 0 assignees View on GitHub
cloud Free GA Team
Dominant language
No language data
Stars
8.9k
Forks
1.8k
PR merge metrics
No merged PRs in 30d

Description

### Value Prop
With workflow-embedded dependency locking in GitHub Actions, you can ensure your CI/CD pipelines always use the exact versions of Actions and dependencies you’ve reviewed. This gives you reproducible builds, clear visibility into changes, and stronger protection against unexpected or compromised code.

### Expected Outcome
By making dependency resolution explicit and verifiable, this feature helps teams prevent silent drift and supply chain risks in their workflows. The goal is to improve reliability, security, and confidence in every workflow run, so you can focus on building and shipping with peace of mind.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.