Skip to content

chore(ci): add GitHub Actions lockfile - #529

Merged
setchy merged 1 commit into
mainfrom
chore/actions-lock
Oct 22, 2026
Merged

setchy merged 1 commit into
mainfrom
chore/actions-lock

Conversation

@setchy

@setchy setchy commented Oct 22, 2026

Copy link
Copy Markdown
Owner

Summary

Adds a GitHub Actions lockfile generated with gh actions-lock, recording a verified commit SHA for every action used by the workflows (direct and transitive) in .github/workflows/actions.lock.

  • Workflows reference readable version tags; the lockfile records the immutable SHA resolved for each ref.
  • Existing inline SHA pins in the workflows were consolidated into the lockfile.

Notes

  • Regenerate the lockfile after adding or changing any uses: with gh actions-lock.
  • Verify it in CI with gh actions-lock --verify.

Some security scanners still expect inline SHA pins and may flag the tag refs until they understand workflow lockfiles. If preferred, the inline pins can be kept alongside the lockfile.

@netlify

netlify Bot commented Oct 22, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for meme-driven-dev ready!

Name Link
🔨 Latest commit a6f9acd
🔍 Latest deploy log https://app.netlify.com/projects/meme-driven-dev/deploys/6ad9ef943ae48950338aa464
😎 Deploy Preview https://deploy-preview-529--meme-driven-dev.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
Lighthouse
Lighthouse
1 paths audited
Performance: 96
Accessibility: 100
Best Practices: 100
SEO: 100
PWA: -
View the detailed breakdown and full score reports

To edit notification comments on pull requests, go to your Netlify project configuration.

@sonarqubecloud

Copy link
Copy Markdown

@setchy
setchy merged commit 7195e18 into main Oct 22, 2026
12 checks passed
@setchy
setchy deleted the chore/actions-lock branch October 22, 2026 11:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant