From ec78e7a27f5e9da2c316ed93f324cd313d93ab7e Mon Sep 17 00:00:00 2001
From: Dirk Kulawiak <dirk@semi.technology>
Date: Thu, 18 Jun 2026 07:36:29 +0200
Subject: [PATCH] Use SHA in workflow

---
 .github/workflows/mirror-issues.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/mirror-issues.yaml b/.github/workflows/mirror-issues.yaml
index 6178714d4..2541c4610 100644
--- a/.github/workflows/mirror-issues.yaml
+++ b/.github/workflows/mirror-issues.yaml
@@ -19,7 +19,7 @@ jobs:
     steps:
       - name: Mint app token for weaviate/${{ matrix.repo }}
         id: app-token
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1
         with:
           app-id: ${{ secrets.MIRROR_APP_ID }}
           private-key: ${{ secrets.MIRROR_APP_PRIVATE_KEY }}