Merge pull request #107 from berquist/renovate/pin-dependencies

chore(deps): pin dependencies
berquist · Jan 19, 2025 · ee4f495 · ee4f495
2 parents 1ae0136 + 9a55202
commit ee4f495
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
@@ -27,13 +27,13 @@ jobs:
         with:
           persist-credentials: false
       - name: Install the latest version of uv
-        uses: astral-sh/setup-uv@v5  # zizmor: ignore[unpinned-uses]
+        uses: astral-sh/setup-uv@b5f58b2abc5763ade55e4e9d0fe52cd1ff7979ca # v5
       - name: Run zizmor 🌈
         run: uvx zizmor --format sarif . > results.sarif
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@v3  # zizmor: ignore[unpinned-uses]
+        uses: github/codeql-action/upload-sarif@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3
         with:
           sarif_file: results.sarif
           category: zizmor