From a12d38d518fdbb2853f036a05fe11b845e311233 Mon Sep 17 00:00:00 2001 From: Dan Fiedler Date: Wed, 7 Oct 2026 15:16:21 -0400 Subject: [PATCH] Pin GitHub Actions to full-length commit SHAs --- .github/workflows/bicep-audit.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/bicep-audit.yml b/.github/workflows/bicep-audit.yml index 575f7496..a9808262 100644 --- a/.github/workflows/bicep-audit.yml +++ b/.github/workflows/bicep-audit.yml @@ -22,7 +22,7 @@ jobs: uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 - name: Run Microsoft Security DevOps Analysis - uses: microsoft/security-devops-action@preview + uses: microsoft/security-devops-action@08976cb623803b1b36d7112d4ff9f59eae704de0 # v1.12.0 id: msdo continue-on-error: true with: