From fd2f57412e0cc90a3c2c27d9570c9ddda2bdb8de Mon Sep 17 00:00:00 2001 From: Dan Fiedler Date: Wed, 7 Oct 2026 15:05:23 -0400 Subject: [PATCH] Pin GitHub Actions to full-length commit SHAs --- .github/workflows/validate-infra.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/validate-infra.yaml b/.github/workflows/validate-infra.yaml index 2e37110..ee004e1 100644 --- a/.github/workflows/validate-infra.yaml +++ b/.github/workflows/validate-infra.yaml @@ -24,7 +24,7 @@ jobs: inlineScript: az config set bicep.use_binary_from_path=false && az bicep build -f infra/main.bicep --stdout - name: Run Microsoft Security DevOps Analysis - uses: microsoft/security-devops-action@preview + uses: microsoft/security-devops-action@08976cb623803b1b36d7112d4ff9f59eae704de0 # v1.12.0 id: msdo continue-on-error: true with: