From e3e836342f915bffb80958ee150526cd9d34e9fe Mon Sep 17 00:00:00 2001 From: "felix-renovate[bot]" <143542247+felix-renovate[bot]@users.noreply.github.com> Date: Mon, 6 Jan 2025 08:44:15 -0800 Subject: [PATCH] chore(deps): pin dependencies (#95) Co-authored-by: felix-renovate[bot] <143542247+felix-renovate[bot]@users.noreply.github.com> --- .github/workflows/zizmor.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/zizmor.yaml b/.github/workflows/zizmor.yaml index 31546f7..2d5d373 100644 --- a/.github/workflows/zizmor.yaml +++ b/.github/workflows/zizmor.yaml @@ -17,12 +17,12 @@ jobs: actions: read steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: persist-credentials: false - name: Install the latest version of uv - uses: astral-sh/setup-uv@v5 + uses: astral-sh/setup-uv@887a942a15af3a7626099df99e897a18d9e5ab3a # v5 - name: Run zizmor 🌈 run: uvx zizmor --format sarif . > results.sarif @@ -30,7 +30,7 @@ jobs: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3 with: sarif_file: results.sarif category: zizmor \ No newline at end of file