Detect actions.lock-only changes and lock dependency review pins

Ensure the dependency-review workflow triggers on .github/workflows/actions.lock-only PRs and runs with locked action/lockfile commit pins.

GRV-862

👋 Thanks for opening this issue! It has been automatically labeled for triage.

⚠️ Possible Duplicate Issue(s)

📝 Issue Planner

_{Check the box below or use the @coderabbitai plan command to generate an implementation plan and prompts that you can use with your favorite coding assistant.}

Create Plan

🧪 Issue enrichment is currently in open beta.

You can configure auto-planning by selecting labels in the issue_enrichment configuration.

To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

issue_enrichment:
  auto_enrich:
    enabled: false

💬 Have feedback or questions? Drop into our discord!

Navigation Menu

Repository navigation

Detect actions.lock-only changes and lock dependency review pins #2513

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Detect actions.lock-only changes and lock dependency review pins #2513

Description

Activity

linear-code commented on Oct 29, 2026

github-actions commented on Oct 29, 2026

coderabbitai commented on Oct 29, 2026

Metadata

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Issue actions