Comment on GitHub’s database of security advisories is now open sourceparentComments−pabs34ySo, store the lock files with your builds, not with your sources.
Comments
So, store the lock files with your builds, not with your sources.