Directories
¶
| Path | Synopsis |
|---|---|
|
Package config loads CLI configuration from file and environment.
|
Package config loads CLI configuration from file and environment. |
|
Package dep defines the working dependency types shared between the resolver and the lockfile.
|
Package dep defines the working dependency types shared between the resolver and the lockfile. |
|
Package ghapi provides a unified GitHub API client that owns both REST and GraphQL connections, retry transport, and profiling instrumentation.
|
Package ghapi provides a unified GitHub API client that owns both REST and GraphQL connections, retry transport, and profiling instrumentation. |
|
httpmock
Package httpmock provides HTTP test fakes for the ghapi client.
|
Package httpmock provides HTTP test fakes for the ghapi client. |
|
Package lockfile manages CLI lockfile state: loading, saving, and converting the on-disk format.
|
Package lockfile manages CLI lockfile state: loading, saving, and converting the on-disk format. |
|
Package pin implements the two-phase pin lifecycle: Plan builds a complete Record of what to pin (pure computation + network reads), and Commit writes the Record to disk (workflow files + lockfile).
|
Package pin implements the two-phase pin lifecycle: Plan builds a complete Record of what to pin (pure computation + network reads), and Commit writes the Record to disk (workflow files + lockfile). |
|
Package pinpool is a small generic worker pool with a Reporter hook for per-slot UI status.
|
Package pinpool is a small generic worker pool with a Reporter hook for per-slot UI status. |
|
Package pipeline orchestrates the scan, resolve, check, and report flow for a single run.
|
Package pipeline orchestrates the scan, resolve, check, and report flow for a single run. |
|
checks
Package checks implements the structural, misleading-sha, and resolver-bound validators run against parsed workflows.
|
Package checks implements the structural, misleading-sha, and resolver-bound validators run against parsed workflows. |
|
Package profile captures phase timing, CPU profiles, and HTTP round-trip logs for performance analysis.
|
Package profile captures phase timing, CPU profiles, and HTTP round-trip logs for performance analysis. |
|
Package resolve resolves action refs to commit SHAs, recursively discovers transitive dependencies, and verifies commit reachability.
|
Package resolve resolves action refs to commit SHAs, recursively discovers transitive dependencies, and verifies commit reachability. |
|
Package syncmap provides a simple generic mutex-guarded map.
|
Package syncmap provides a simple generic mutex-guarded map. |
|
Package tag lists tags, classifies versions, and applies release cooldown.
|
Package tag lists tags, classifies versions, and applies release cooldown. |
|
Package ui provides terminal-aware output formatting for gh-actions-lock.
|
Package ui provides terminal-aware output formatting for gh-actions-lock. |
|
Package workflowfile owns the parsed workflow YAML representation: loading, extraction of action refs, local composite discovery, and comment-preserving rewriting.
|
Package workflowfile owns the parsed workflow YAML representation: loading, extraction of action refs, local composite discovery, and comment-preserving rewriting. |
Click to show internal directories.
Click to hide internal directories.