A gh CLI extension that generates and verifies the GitHub Actions dependency lockfile, pinning every action your workflows use to an exact commit.
-
Updated
Oct 29, 2026 - Go
#
dependency-pinning
Here are 9 public repositories matching this topic...
The authoritative definition of the GitHub Actions dependency lockfile format, plus a Go parser for auditing and verifying the action pins in use across a repo's workflows.
-
Updated
Oct 27, 2026 - Go
DeepSeek Harness（dsh）Windows 免安装版：逐包钉死依赖版本，发布前复核官方 CDN 产物的 sha512 | Portable Windows builds of dsh with exact dependency pins and third-party sha512 checks
electron desktop-app windows portable-apps dsh github-actions dependency-pinning artifact-verification deepseek-harness
-
Updated
Oct 30, 2026 - JavaScript
Pin your GitHub Actions. Prick holes in their supply chain security.
rust cli security cicd appsec software-supply-chain devsecops github-actions rust-cli slsa supply-chain-security dependency-pinning sha-pinning
-
Updated
Oct 31, 2026 - Rust
Tooling to manage the `pyodide-lock.json` file
-
Updated
Oct 27, 2026 - Python
Pin workflow dependency versions to full-length hashes.
-
Updated
Oct 27, 2026 - C#
List what a build downloads (images, actions, URLs, packages), say what is not pinned, and list what a mirror or firewall allowlist has to hold.
-
Updated
Nov 1, 2026 - Python
Scripts to pin poetry and pipenv dependencies
python poetry pipfile dependencies dependency pinning pipenv pyproject dependency-hell dependency-pinning
-
Updated
Jul 27, 2022 - Python
Audit your GitHub Actions supply chain security with pinprick
security cicd sarif devsecops github-actions github-action supply-chain-security dependency-pinning sha-pinning
-
Updated
Oct 31, 2026 - Shell
Add this topic to your repo
To associate your repository with the dependency-pinning topic, visit your repo's landing page and select "manage topics."