Workflow dependency lockfiles https://lobste.rs/s/nft1s2 #vcs https://docs.github.com/en/actions/concepts/security/workflow-dependency-lockfiles