Blog / tag2 entries
security
Every preloop note filed under security.
3 min
GitHub Actions now supports workflow lockfiles
A lockfile turns action tags into recorded commits. That removes a class of supply-chain risk, but only if CI checks it before a job runs.
preloop engineering4 minA fork PR can cancel your production deploy
A concurrency group keyed on a branch name lets any fork cancel a deploy. The same shape appears in workflow resolution, environment gates, OIDC and artifacts.
preloop engineering