Use the gh actions-lock extension for the GitHub CLI to generate .github/workflows/actions.lock for actions and their transitive dependencies.

https://github.blog/changelog/2026-10-28-github-actions-work...