From f8c6c1850abcab9cc26df4dbf17f510e99ea1eee Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Tue, 14 Apr 2026 11:23:08 +0000 Subject: [PATCH] fix: pin dependency-audit reusable workflow to SHA Pin petry-projects/.github reusable workflow to commit SHA instead of mutable @v1 tag to satisfy action-pinning policy. Co-authored-by: don-petry --- .github/workflows/dependency-audit.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependency-audit.yml b/.github/workflows/dependency-audit.yml index f1173774..bc764198 100644 --- a/.github/workflows/dependency-audit.yml +++ b/.github/workflows/dependency-audit.yml @@ -30,4 +30,4 @@ permissions: jobs: dependency-audit: - uses: petry-projects/.github/.github/workflows/dependency-audit-reusable.yml@v1 + uses: petry-projects/.github/.github/workflows/dependency-audit-reusable.yml@ae9709f4466dec60a5733c9e7487f69dcd004e05 # v1