From d11b6cb1e3c8cd17f989b4d22dd21dc8d3ffb7a3 Mon Sep 17 00:00:00 2001 From: StepSecurity Bot Date: Fri, 8 Mar 2024 06:17:33 +0000 Subject: [PATCH] [StepSecurity] ci: Harden GitHub Actions Signed-off-by: StepSecurity Bot --- .github/workflows/dependency-review.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 7971566..ce77603 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -26,5 +26,5 @@ jobs: - name: 'Dependency Review' uses: actions/dependency-review-action@0efb1d1d84fc9633afcdaad14c485cbbc90ef46c # v2.5.1 - name: Maven Dependency Tree Dependency Submission - uses: advanced-security/maven-dependency-submission-action@v4.0.2 + uses: advanced-security/maven-dependency-submission-action@bfd2106013da0957cdede0b6c39fb5ca25ae375e # v4.0.2