Workflow dependency lockfiles
Summary
Workflow dependency lockfiles explain how to pin every action a GitHub Actions workflow uses to a specific commit, ensuring reproducible builds and auditable dependency changes. The article covers how lockfiles work, what they record, how they differ from SHA pinning, and next steps for enabling them using the gh actions-lock tool.