summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChristian Cleberg <[email protected]>2026-08-07 03:38:40 -0500
committerChristian Cleberg <[email protected]>2026-08-07 03:38:40 -0500
commitf9f86b9681909b14304909b1286b9b50362625d7 (patch)
treecebd9fb63f26e402b85f5db4192f5dc844c48a27
parent89c90d11d80fde63997ca029e14806df0319a541 (diff)
downloadhutch-f9f86b9681909b14304909b1286b9b50362625d7.tar.gz
hutch-f9f86b9681909b14304909b1286b9b50362625d7.tar.bz2
hutch-f9f86b9681909b14304909b1286b9b50362625d7.zip
Pin create-pull-request action to a commit SHA
SonarCloud (githubactions:S7637) flags third-party actions referenced by mutable tag as a supply-chain risk; pin to the v7 commit SHA.
-rw-r--r--.github/workflows/sync-man-pages.yml2
1 files changed, 1 insertions, 1 deletions
diff --git a/.github/workflows/sync-man-pages.yml b/.github/workflows/sync-man-pages.yml
index ea73e26..46c7701 100644
--- a/.github/workflows/sync-man-pages.yml
+++ b/.github/workflows/sync-man-pages.yml
@@ -40,7 +40,7 @@ jobs:
run: python3 scripts/sync_man_pages.py
- name: Open pull request on change
- uses: peter-evans/create-pull-request@v7
+ uses: peter-evans/create-pull-request@22a9089034f40e5a961c8808d113e2c98fb63676 # v7
with:
add-paths: Hutch/Resources/man-pages.json
branch: automated/man-page-catalog