github / github/roadmap

Locked Dependencies for GitHub Actions Workflows [GA]

未关闭
#1,268 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
cloud Free GA Team
主要语言
没有语言数据
星标
8.9k
派生
1.8k
PR 合并指标
30 天内没有已合并 PR

描述

### Value Prop
With workflow-embedded dependency locking in GitHub Actions, you can ensure your CI/CD pipelines always use the exact versions of Actions and dependencies you’ve reviewed. This gives you reproducible builds, clear visibility into changes, and stronger protection against unexpected or compromised code.

### Expected Outcome
By making dependency resolution explicit and verifiable, this feature helps teams prevent silent drift and supply chain risks in their workflows. The goal is to improve reliability, security, and confidence in every workflow run, so you can focus on building and shipping with peace of mind.

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。