github/gh-actions-lock
A gh CLI extension that generates and verifies the GitHub Actions dependency lockfile, pinning every action your workflows use to an exact commit.
Is github/gh-actions-lock beginner-friendly?
In the last 30 days, github/gh-actions-lock merged 7 of 18 pull requests from outside contributors, and its maintainers usually reply within 1 day. No beginner-friendly issue is open right now; the list below has the other issues we hold for it.
- Stars
- 253
- Forks
- 15
- Open beginner issues
- 0
- Indexed issues
- 42
- Avg merge
- 19h 30m
- Merged PRs (30d)
- 60
- Dominant language
- Go
- License
- MIT
- Last GitHub push
- Oct 27, 2026
- Latest indexed
- Sep 16, 2026
- Contributing guide
- Contributing guide
- Code of conduct
- Code of conduct
- Beginner labels
- No beginner labels indexed
How to contribute to github/gh-actions-lock
- Read the contributing guide first: it says how the maintainers want changes proposed, tested and reviewed.
- Read its code of conduct: it covers issues and pull requests as well as chat.
- Your contributions will be published under the project's MIT license.
- Follow the repository to hear when a new beginner-friendly issue opens, or look through the other issues below.
Issues somebody may already be working on are listed last. List everything by date
-
Fix mode unpins a reusable workflow call when the same repository is also used as a step actionOpen
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
github/gh-actions-lock#261 ·
Maintainers usually reply within 1 day
-
Difficulty 3/5 1-2 days Newbie friendliness 52/100
github/gh-actions-lock#252 ·
Maintainers usually reply within 1 day
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
github/gh-actions-lock#247 · 1 comment ·
Maintainers usually reply within 1 day
-
Difficulty 5/5 Over a week Newbie friendliness 30/100
github/gh-actions-lock#246 · 1 reaction ·
Maintainers usually reply within 1 day
-
Feature Request: Allow `--relock` without updating mutable ("floating") tagsMay be free again A pull request for this issue was closed without being merged. Openfeedback
Difficulty 3/5 1-2 days Newbie friendliness 62/100
github/gh-actions-lock#238 · 2 comments · 1 reaction ·
Maintainers usually reply within 1 day
-
area:cli feature-request
Difficulty 4/5 3-5 days Newbie friendliness 48/100
github/gh-actions-lock#236 ·
Maintainers usually reply within 1 day
-
area:cli feedback
Difficulty 2/5 1-3 hours Newbie friendliness 57/100
github/gh-actions-lock#223 · 3 comments · 2 reactions ·
Maintainers usually reply within 1 day
-
feature-request
Difficulty 5/5 Over a week Newbie friendliness 45/100
github/gh-actions-lock#194 · 2 comments ·
Maintainers usually reply within 1 day
-
area:composite-actions feature-request
Difficulty 5/5 Over a week Newbie friendliness 35/100
github/gh-actions-lock#183 · 5 comments ·
Maintainers usually reply within 1 day
-
area:docs area:reusable-workflows bug feature-request
Difficulty 3/5 1-2 days Newbie friendliness 25/100
github/gh-actions-lock#179 · 2 comments · 5 reactions ·
Maintainers usually reply within 1 day
-
area:cli feature-request
Difficulty 4/5 3-5 days Newbie friendliness 35/100
github/gh-actions-lock#164 ·
Maintainers usually reply within 1 day
-
area:cli feature-request
Difficulty 5/5 Over a week Newbie friendliness 35/100
github/gh-actions-lock#140 · 1 reaction ·
Maintainers usually reply within 1 day
-
area:lockfile feature-request
Difficulty 5/5 Over a week Newbie friendliness 45/100
github/gh-actions-lock#139 · 2 comments · 3 reactions ·
Maintainers usually reply within 1 day
-
area:cli feature-request
Difficulty 3/5 1-2 days Newbie friendliness 72/100
github/gh-actions-lock#134 · 5 reactions ·
Maintainers usually reply within 1 day
-
area:cli feature-request
Difficulty 4/5 3-5 days Newbie friendliness 45/100
github/gh-actions-lock#133 · 1 reaction ·
Maintainers usually reply within 1 day
-
area:cli feature-request
Difficulty 5/5 Over a week Newbie friendliness 35/100
github/gh-actions-lock#132 · 3 comments · 2 reactions ·
Maintainers usually reply within 1 day
-
area:ghas-integration feature-request
Difficulty 4/5 3-5 days Newbie friendliness 35/100
github/gh-actions-lock#131 ·
Maintainers usually reply within 1 day
-
area:policy feedback
Difficulty 3/5 1-2 days Newbie friendliness 58/100
github/gh-actions-lock#125 · 4 comments · 1 reaction ·
Maintainers usually reply within 1 day
-
area:dependency-graph-integration feature-request
Difficulty 4/5 3-5 days Newbie friendliness 48/100
github/gh-actions-lock#122 · 3 reactions ·
Maintainers usually reply within 1 day
-
area:enterprise-management feature-request
Difficulty 5/5 Over a week Newbie friendliness 25/100
github/gh-actions-lock#91 · 1 comment ·
Maintainers usually reply within 1 day
-
Dependabot drops an unchanged transitive dependency when bumping a composite actionPossibly taken A pull request linked to this issue is open or already merged. Open
Difficulty 4/5 3-5 days Newbie friendliness 30/100
github/gh-actions-lock#257 · 1 comment ·
Maintainers usually reply within 1 day
-
--migrate-local-actions rewrites action files in nested worktrees and submodulesPossibly taken @aksestok claimed this 1 day ago. Open
Difficulty 3/5 1-2 days Newbie friendliness 20/100
github/gh-actions-lock#253 ·
Maintainers usually reply within 1 day
-
Bug: Modifying `owner_id` in a lockfile does not cause a validation failurePossibly taken @jay23606 claimed this 12 days ago. Openarea:cli bug
Difficulty 2/5 1-3 hours Newbie friendliness 57/100
github/gh-actions-lock#211 · 2 comments · 1 reaction ·
Maintainers usually reply within 1 day