When locking a repo that contains locally referenced actions...

[jessehouwing]

I have a repo that has:

.github/workflows/workflow.yaml

Which references:

$/.github/actions/my-local-action

Which in turn references:

actions/create-github-app-token@bcd2ba4

When locking the repo, the sha remains and also end up in the lock file, instead of the human readable version...

I'd like it it either the local action would get its own lock file, or as part of the lock operation I had a way to rewrite local actions to the repo as well and have them stuck in the lock file at the same time.

[nodeselector]

This should be fixed in #100. Can you see if this still repros for you with the release candidate here?

[jessehouwing]

Looks like the composite actions got updated correctly