Skip to content

DevToolHub

Practical guides to Git, CI/CD, Ollama, and Azure

  • Guides
  • AI Tools
  • Cloud
  • Docker
  • Kubernetes
  • Git

Tag: supply-chain-security

GitHub Actions Lockfile Guide: How actions.lock Works

November 4, 2026November 4, 2026 Amaresh Pelleti
GitHub Actions lockfile diagram showing actions.lock pinning workflow dependencies to commit SHAs

GitHub Actions workflow lockfiles went into public preview on October 14, 2026 and became generally available on October 28. The timing is almost funny: GitHub automated the exact workaround this blog told you to do by hand. A GitHub Actions… Read moreGitHub Actions Lockfile Guide: How actions.lock Works

GIthub actions  ci-cd, devsecops, supply-chain-security  Leave a comment

Get the next DevToolHub guide

New guides on Git, GitHub Actions, Ollama, and Azure, delivered to your inbox. Subscribe for troubleshooting steps, configuration examples, and explanations of the trade-offs.

Topics

  • Guides
  • AI Tools
  • Cloud
  • Docker
  • Kubernetes
  • Git
  • Blog
  • Privacy Policy
  • About
  • Affiliate Disclosure
  • Terms and Conditions
  • Resources
© 2026 All rights reserved
Go to top