Rename gh-actions-pin to gh-actions-lock

[nodeselector]

Mechanical rename of the extension from gh-actions-pin to gh-actions-lock.

What changed

• Module path: github.com/github/gh-actions-pin → github.com/github/gh-actions-lock
• Binary / extension name: gh-actions-pin → gh-actions-lock
• CLI command: gh actions-pin → gh actions-lock
• cmd/ directory: cmd/gh-actions-pin/ → cmd/gh-actions-lock/
• Environment variables: GH_ACTIONS_PIN_* → GH_ACTIONS_LOCK_*
• All user-facing strings, docs, tests, golden files, integration harness

90 files, 295 insertions / 295 deletions. Zero functional changes — build passes, all unit tests pass.

Not changed

• actions-lockfile dependency (separate package)
• actions.lock filename (the lockfile format)
• Internal pinning logic (the pin package etc. — those are implementation concepts, not branding)

Follow-ups (not in this PR)

• Actual GitHub repo rename (github/gh-actions-pin → github/gh-actions-lock)
• Release tagging under the new name
• Update any external docs / references

[Copilot]

⚠️ Not ready to approve

The integration harness still sets legacy GH_ACTIONS_PIN_* environment variables, which conflicts with the renamed GH_ACTIONS_LOCK_* variables used by the code and can break integration scenarios.

Pull request overview

This PR performs a mechanical rename of the GitHub CLI extension from gh-actions-pin to gh-actions-lock, updating module/import paths, CLI command names, environment variables, and user-facing strings across the codebase and test assets.

Changes:

• Renames the Go module path and all internal imports to github.com/github/gh-actions-lock.
• Updates CLI entrypoints / command usage strings (gh actions-lock), env vars (GH_ACTIONS_LOCK_*), and UI/error messaging.
• Updates integration/unit tests, golden files, and release automation to reflect the new name.

File summaries

File	Description
test/scenarios/catalog.yml	Renames scenario catalog strings to gh-actions-lock.
test/integration/run.rb	Updates integration scenario strings and lockfile header text.
test/integration/harness.rb	Renames tmpdir prefixes, shell banner, build path/output binary naming, and related strings.
script/sync-early-access-release	Renames release-sync script messaging/default source repo.
README.md	Renames extension install/usage documentation and env var reference.
Makefile	Renames built binary/extension name and build target path.
internal/ui/ui.go	Renames package comment and debug-progress env var/log naming.
internal/tag/testing.go	Updates internal imports to new module path.
internal/tag/tags.go	Updates internal imports to new module path.
internal/tag/tags_test.go	Updates internal imports to new module path.
internal/tag/tags_keys_test.go	Updates internal imports to new module path.
internal/resolve/reverse_lookup.go	Updates internal imports to new module path.
internal/resolve/reverse_lookup_test.go	Updates internal imports to new module path.
internal/resolve/resolver.go	Updates internal imports to new module path.
internal/resolve/resolver_test.go	Updates internal imports to new module path.
internal/resolve/reachability.go	Updates internal imports to new module path.
internal/resolve/reachability_test.go	Updates internal imports to new module path.
internal/resolve/peel.go	Updates internal imports to new module path.
internal/resolve/peel_test.go	Updates internal imports to new module path.
internal/resolve/discovery.go	Updates internal imports to new module path.
internal/resolve/discover_test.go	Updates internal imports to new module path.
internal/resolve/cacheentry.go	Updates internal imports to new module path.
internal/resolve/ancestry.go	Updates internal imports to new module path.
internal/resolve/ancestry_test.go	Updates internal imports to new module path.
internal/pipeline/run.go	Updates internal imports to new module path.
internal/pipeline/run_test.go	Updates internal imports to new module path.
internal/pipeline/resolver_test.go	Updates internal imports to new module path.
internal/pipeline/reach_partition.go	Updates internal imports to new module path.
internal/pipeline/reach_findings.go	Updates internal imports to new module path.
internal/pipeline/reach_findings_test.go	Updates internal imports to new module path.
internal/pipeline/parse.go	Updates internal imports to new module path.
internal/pipeline/impostor_parity_test.go	Updates internal imports to new module path.
internal/pipeline/finding_enrich.go	Updates internal imports to new module path.
internal/pipeline/doc_urls.go	Updates internal imports to new module path.
internal/pipeline/diagnose.go	Updates remediation text to gh actions-lock.
internal/pipeline/checks/structural.go	Updates imports and remediation text to gh actions-lock.
internal/pipeline/checks/run.go	Updates internal imports to new module path.
internal/pipeline/checks/run_test.go	Updates internal imports to new module path.
internal/pipeline/checks/resolver.go	Updates internal imports to new module path.
internal/pipeline/checks/parsed.go	Updates internal imports to new module path.
internal/pipeline/checks/misleading.go	Updates remediation text to gh actions-lock.
internal/pipeline/checks/impostor.go	Updates internal imports to new module path.
internal/pipeline/checks/impostor_test.go	Updates internal imports to new module path.
internal/pipeline/checks/finding.go	Updates internal imports to new module path.
internal/pipeline/checks/category.go	Updates docs/comments to gh actions-lock.
internal/pinpool/pool.go	Renames env var to GH_ACTIONS_LOCK_STALL_HINT_MS.
internal/pinpool/pool_test.go	Updates tests to use GH_ACTIONS_LOCK_STALL_HINT_MS.
internal/pin/retain_impostor_test.go	Updates internal imports to new module path.
internal/pin/record.go	Renames tool name and log directory to gh-actions-lock.
internal/pin/record_test.go	Updates expected tool name to gh-actions-lock.
internal/pin/plan.go	Updates internal imports to new module path.
internal/pin/plan_test.go	Updates internal imports to new module path.
internal/pin/commit.go	Updates internal imports to new module path.
internal/lockfile/state.go	Updates lockfile header and upgrade guidance to gh-actions-lock / gh actions-lock.
internal/lockfile/state_test.go	Updates expected upgrade hint and golden header text.
internal/lockfile/direct_tracker.go	Updates internal imports to new module path.
internal/lockfile/convertor.go	Updates internal imports to new module path.
internal/ghapi/repos_test.go	Updates internal imports to new module path.
internal/ghapi/repos_dedup_test.go	Updates internal imports to new module path.
internal/ghapi/graphql_reachability.go	Updates internal imports to new module path.
internal/ghapi/graphql_peel.go	Updates internal imports to new module path.
internal/ghapi/graphql_peel_test.go	Updates internal imports to new module path.
internal/ghapi/graphql_action_files.go	Updates internal imports to new module path.
internal/ghapi/client.go	Renames insecure-test env var to GH_ACTIONS_LOCK_INSECURE.
internal/config/config.go	Renames config/workers/stall/progress env vars and config path to gh-actions-lock.
go.mod	Renames module path to github.com/github/gh-actions-lock.
cmd/gh-actions-lock/testdata/golden-json/expected.json	Updates golden remediation strings to gh actions-lock.
cmd/gh-actions-lock/testdata/golden-json/.github/workflows/ci.yml	Adds/updates golden workflow fixture under new command path.
cmd/gh-actions-lock/testdata/golden-json/.github/workflows/actions.lock	Adds/updates golden lockfile fixture.
cmd/gh-actions-lock/root.go	Renames root command usage/docs and workflows-dir env var.
cmd/gh-actions-lock/root_test.go	Adds/updates test for Cobra usage suppression flags.
cmd/gh-actions-lock/pin_summary.go	Updates imports and CLI hint strings.
cmd/gh-actions-lock/pin_summary_test.go	Updates internal imports to new module path.
cmd/gh-actions-lock/onboard_gate.go	Updates remediation text to gh actions-lock check.
cmd/gh-actions-lock/main.go	Adds/updates main entrypoint for renamed command.
cmd/gh-actions-lock/lockrecovery.go	Updates imports and recovery guidance to gh actions-lock check.
cmd/gh-actions-lock/lockrecovery_test.go	Updates internal imports to new module path.
cmd/gh-actions-lock/format/url.go	Adds/updates dependency URL formatting helper under renamed command tree.
cmd/gh-actions-lock/format/url_test.go	Adds/updates tests for DepReleaseURL behavior.
cmd/gh-actions-lock/format/terminal.go	Updates imports and CLI hint strings; updates TODO text.
cmd/gh-actions-lock/format/terminal_test.go	Updates expectations for renamed CLI hints.
cmd/gh-actions-lock/format/json.go	Updates imports to new module path.
cmd/gh-actions-lock/format/json_test.go	Adds/updates tests for JSON field validation.
cmd/gh-actions-lock/errors.go	Adds/updates shared sentinel error for silent failures.
cmd/gh-actions-lock/command_test.go	Updates internal imports to new module path.
cmd/gh-actions-lock/check.go	Renames command docs/examples and imports to new module path.
cmd/gh-actions-lock/check_json_golden_test.go	Updates golden-test docs and imports for new command path.
.gitignore	Renames ignored build artifacts to gh-actions-lock.
.github/workflows/release.yml	Updates release build target path to ./cmd/gh-actions-lock.
.github/workflows/actions.lock	Updates lockfile header strings to gh actions-lock.

Copilot's findings

• Files reviewed: 80/90 changed files
• Comments generated: 5

Note

Your feedback helps us improve the quality of this feature.
Please use 👍 or 👎 to tell us whether this assessment is correct.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.