Skip to main content
Security for GitHub Actions
Use security best practices with GitHub Actions, and use GitHub Actions to improve the security of your software supply chain.
Locking action dependencies in a repository's workflows
Generate a lockfile that pins every action your workflows use to a verified commit, and keep it current as your dependencies change.
Using artifact attestations
Use artifact attestations to establish build provenance for the software you produce and to verify the software you consume.
Security hardening your deployments
Use OpenID Connect within your workflows to authenticate with your cloud provider.