gjtorikian/GitHub Actions Lockfile
Generate and verify lockfiles for GitHub Actions dependencies
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| mode | Mode to run in: generate or verify | yes | verify |
| token | GitHub token for API access | no | ${{ github.token }} |
| workflows | Path to workflows directory | no | .github/workflows |
| output | Path to lockfile | no | .github/actions.lock.json |
| comment | Post a PR comment when verification fails (only in verify mode) | no | true |
| require-sha | Require all action refs to be full SHAs (generate mode only) | no | false |
| skip-sha | Skip SHA resolution verification (verify mode only) | no | false |
| skip-integrity | Skip integrity hash verification (verify mode only) | no | false |
| skip-advisories | Skip security advisory checking (verify mode only) | no | false |
Outputs
| name | description |
|---|---|
| changed | Whether the lockfile changed (for generate mode) |