simplicityguy/clockpin

Keep every pinned dependency in a repo in step with upstream, and open a PR with the updates.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Stale
License
None
namedescriptionrequireddefault
commandSubcommand to run: run, check, or list.run
versionclockpin release to install. Empty (default) installs the release matching the action's own CalVer tag, keeping the binary and action in sync; use "latest" or a tag like v2026.7.0 to override.""
pathRepository root to operate on (--path). Defaults to the checkout root.""
dry-runPreview changes without writing (--dry-run).false
freezeTools to freeze to SHA/digest pins (--freeze): actions, pre-commit, docker, or all.""
onlyRestrict to these ecosystems (--only), space/comma separated.""
skipExclude these ecosystems (--skip), space/comma separated.""
majorPull held-back major versions (--major).false
log-jsonWrite a JSON run log to this file (--log-json). Embedded in the PR body when set.""
verboseVerbose output (--verbose).false
quietQuiet output (--quiet).false
no-colorDisable colored output (--no-color).false
create-prOpen a pull request with the changes. Ignored for check/list.true
tokenGitHub token used to push the branch and open the PR.${{ github.token }}
branchHead branch for the pull request.clockpin/updates
baseBase branch for the pull request. Defaults to the branch the workflow ran on.""
commit-messageCommit message for the update commit.chore(deps): update pinned dependencies via clockpin
pr-titlePull request title. Defaults to the commit message.""
pr-bodyPull request body. Defaults to an auto-generated summary.""
pr-labelsLabels to add to the PR, comma/space separated. Missing labels are skipped with a warning.dependencies
pr-draftOpen the pull request as a draft.false
commit-user-nameGit author/committer name for the update commit.github-actions[bot]
commit-user-emailGit author/committer email for the update commit.41898282+github-actions[bot]@users.noreply.github.com
namedescription
changedtrue if clockpin modified any tracked file.
clockpin-versionThe resolved clockpin version that was installed.
pull-request-numberNumber of the pull request that was created or updated.
pull-request-urlURL of the pull request that was created or updated.