diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock
new file mode 100644
index 0000000..bd31cf6
--- /dev/null
+++ b/.github/workflows/actions.lock
@@ -0,0 +1,38 @@
+# This file is machine-generated by `gh actions-lock`.
+# Do not edit by hand; run `gh actions-lock` to update.
+# Docs: https://gh.io/actions-lockfile
+version: 'v0.0.3'
+workflows:
+    '.github/workflows/ci.yml':
+        - 'actions/checkout@v4'
+        - 'actions/setup-go@v5'
+    '.github/workflows/publish-release.yml':
+        - 'actions/checkout@v4'
+        - 'actions/create-github-app-token@v1'
+        - 'actions/setup-go@v5'
+        - 'goreleaser/goreleaser-action@v6.1.0'
+    '.github/workflows/release-doctor.yml':
+        - 'actions/checkout@v4'
+    '.github/workflows/semgrep.yml': []
+    '.github/workflows/vuln-remediation.yml': []
+dependencies:
+    'actions/checkout@v4':
+        ref: 'v4'
+        commit: 'sha1-11d5960a326750d5838078e36cf38b85af677262'
+        owner_id: 44036562
+        repo_id: 197814629
+    'actions/create-github-app-token@v1':
+        ref: 'v1'
+        commit: 'sha1-d72941d797fd3113feb6b93fd0dec494b13a2547'
+        owner_id: 44036562
+        repo_id: 642580244
+    'actions/setup-go@v5':
+        ref: 'v5'
+        commit: 'sha1-40f1582b2485089dde7abd97c1529aa768e1baff'
+        owner_id: 44036562
+        repo_id: 192624594
+    'goreleaser/goreleaser-action@v6.1.0':
+        ref: 'v6.1.0'
+        commit: 'sha1-9ed2f89a662bf1735a48bc8557fd212fa902bebf'
+        owner_id: 24697112
+        repo_id: 209873006