Reference edition : . Retrospective written and published on .
GitHub makes workflow dependency locking generally available.
Reference points to check
Source publication : .
- .github/workflows/actions.lock
- gh actions-lock
- commit SHA
Prepare a useful check
Compare readable references with the locked commit and inspect the diff on the next update. Pinning a revision does not assess its content.
For a digital intelligence record, separate the announcement, observed exposure and decision. Link each conclusion to a reference and leave unestablished points open.
Keep the reference, its date and the relevant passage. Then identify the service, version and responsible person in your own environment.
Try the change on a copy or a limited scope. Compare expected behaviour with the observed result and retain evidence of the check.
This editorial reading proposes a checking method. A supplier announcement confirms neither account enablement nor the outcome on your installation.
Primary source : GitHub Changelog.