Issues

• Feature request: upgrade action versions and regenerate actions.lock

  github/gh-actions-lock#140 · Filter by author cons-tan-tan opened on Oct 3, 2026

• [FR] Per-workflow lock files

  github/gh-actions-lock#139 · Filter by author webknjaz opened on Oct 2, 2026

• [FR] gh lock should be able to locate in-tree composite actions called by foreign reusable workflows

  github/gh-actions-lock#138 · Filter by author webknjaz opened on Oct 2, 2026

• Feature request: allow cooldown via CLI flag (--cooldown-days)

  github/gh-actions-lock#134 · Filter by author mkusaka opened on Sep 27, 2026

• Feature request: repo-local configuration file support

  github/gh-actions-lock#133 · Filter by author mkusaka opened on Sep 27, 2026

• Feature request: minimum release age (cooldown) for resolved pins

  github/gh-actions-lock#132 · Filter by author mkusaka opened on Sep 27, 2026
  3

• @github-advanced-security[bot] needs to understand lock files too

  github/gh-actions-lock#131 · Filter by author jessehouwing opened on Sep 24, 2026

• v0.1.6 fix mode: management banner is not idempotent, and bare-SHA refs are rewritten to mutable tags

  github/gh-actions-lock#130 · Filter by author hyperpolymath opened on Sep 22, 2026

• v0.1.6: job-level reusable-workflow uses: refs are invisible — missed desync, false stale, and fix mode prunes a correct entry

  github/gh-actions-lock#129 · Filter by author hyperpolymath opened on Sep 22, 2026

• lock the pypa/gh-action-pypi-publish action because of an unpinnable local docker image

  github/gh-actions-lock#128 · Filter by author jessehouwing opened on Sep 18, 2026

• Using $/abc in an action.yaml to point to another action in the same repo fails at execution time

  github/gh-actions-lock#126 · Filter by author jessehouwing opened on Sep 12, 2026

• A broken action.lock file causes it to be ignored

  github/gh-actions-lock#125 · Filter by author jessehouwing opened on Sep 11, 2026

• gh actions-lock --verify --no-migrate-local-actions should not fail on local actions

  github/gh-actions-lock#123 · Filter by author jessehouwing opened on Sep 8, 2026
  2

• Add support to report the versions to the dependency graph API

  github/gh-actions-lock#122 · Filter by author jessehouwing opened on Sep 2, 2026

• The "migrate local to $/" should raise a warning or refuse to migrate when a custom head is passed to checkout.

  github/gh-actions-lock#112 · Filter by author jessehouwing opened on Aug 18, 2026

• CLI should not raise error on local action paths, when asked to ignore local actions

  github/gh-actions-lock#111 · Filter by author jessehouwing opened on Aug 18, 2026

• gh actions-lock CLI and GitHub Actions Runner Disagree on Moved Repo Resolution

  github/gh-actions-lock#110 · Filter by author achrinza opened on Aug 13, 2026
  2

• Proposal: inherited organization and enterprise Action locks

  github/gh-actions-lock#91 · Filter by author vegardx opened on Jul 24, 2026