From 35eb7e2f812f1284348090493348b185ba1aafd6 Mon Sep 17 00:00:00 2001 From: Joe Blau Date: Mon, 26 Oct 2026 13:30:48 -0700 Subject: [PATCH] ci(security): pin security workflows to v1.0.2 v1.0.2 retries and verifies scanner tool downloads, so transient github.com 5xx errors no longer fail the security jobs. Signed-off-by: Joe Blau --- .github/workflows/security-nightly.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/security-nightly.yml b/.github/workflows/security-nightly.yml index 024a00a..8177538 100644 --- a/.github/workflows/security-nightly.yml +++ b/.github/workflows/security-nightly.yml @@ -29,7 +29,7 @@ jobs: scan: # Fork guard: never run fork PR code on self-hosted minis if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository - uses: bloxwap/.github/.github/workflows/security-scan.yml@0387d86d796b5a80509a9862b35991a160ff13b4 # v1.0.1 + uses: bloxwap/.github/.github/workflows/security-scan.yml@6755bcc6a591531ae95a5babfa389c329f71ba0b # v1.0.2 permissions: contents: read with: