This only handle your actions, not their dependencies (which seems to be the purpose of gh-actions-lockfile)