ghavm manages version pinning and upgrades for GitHub Actions workflows.

ci continuous-integration github-actions supply-chain
2 Open Issues Need Help Last updated: Jul 16, 2025

Open Issues Need Help

View All on GitHub

AI Summary: The `ghavm` tool, which pins and upgrades GitHub Actions workflow versions, needs to be updated to correctly handle direct references to workflow YAML files. Currently, it doesn't process paths or references within the YAML files themselves, leading to incomplete pinning or upgrading. The task involves modifying the tool's parsing logic to correctly identify and process these direct references, ensuring that all specified actions are handled appropriately.

Complexity: 4/5
bug help wanted good first issue

ghavm manages version pinning and upgrades for GitHub Actions workflows.

Go
#ci#continuous-integration#github-actions#supply-chain

AI Summary: The task is to investigate why the released macOS binaries for the `ghavm` tool are not executable, likely due to macOS's quarantine feature triggered by a missing developer signature. This involves researching macOS code signing requirements, potentially obtaining a developer certificate, and signing the binaries to resolve the issue.

Complexity: 4/5
bug help wanted

ghavm manages version pinning and upgrades for GitHub Actions workflows.

Go
#ci#continuous-integration#github-actions#supply-chain