From c22782ad82d3811ff91552ab76f0b1eb2b3e438f Mon Sep 17 00:00:00 2001 From: Paul McCann Date: Thu, 20 Mar 2025 10:06:14 +0000 Subject: [PATCH] Update attack-coverage-update.yml Pinning action to a full length commit SHA [see](https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions#using-third-party-actions) --- .github/workflows/attack-coverage-update.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/attack-coverage-update.yml b/.github/workflows/attack-coverage-update.yml index 22110811427..a185f60d8f2 100644 --- a/.github/workflows/attack-coverage-update.yml +++ b/.github/workflows/attack-coverage-update.yml @@ -45,7 +45,7 @@ jobs: git add docs-dev/"ATT\&CK-coverage.md" - name: Create Pull Request - uses: peter-evans/create-pull-request@v7.0.3 + uses: peter-evans/create-pull-request@6cd32fd93684475c31847837f87bb135d40a2b79 # v7.0.3 with: assignees: '${{github.actor}}' delete-branch: true