From 412c3cc8e612c6bd40790680a2b4a24e95eeb9c6 Mon Sep 17 00:00:00 2001 From: Jay Flowers Date: Fri, 28 Aug 2026 13:42:32 -0400 Subject: [PATCH] fix: update security action SHAs to valid versions - google/osv-scanner-action: v2.0.2 -> v2.5.1 - ossf/scorecard-action: v2.4.2 -> v2.4.4 The previous pinned SHAs no longer resolve, causing CI failures. --- .github/workflows/ci_security.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci_security.yml b/.github/workflows/ci_security.yml index a99bc1d..b03cf68 100644 --- a/.github/workflows/ci_security.yml +++ b/.github/workflows/ci_security.yml @@ -28,7 +28,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Run OSV-Scanner - uses: google/osv-scanner-action/osv-scanner-action@e5012758b0e8dd5bfb87e3def776e6a05a2a5af2 # v2.0.2 + uses: google/osv-scanner-action/osv-scanner-action@6e4298ebc4db23e847df9b2e2de2939d6f066c67 # v2.5.1 with: scan-args: |- --recursive @@ -49,7 +49,7 @@ jobs: persist-credentials: false - name: Run Scorecards - uses: ossf/scorecard-action@05b42c624433fc40578a4093d9a6c705f1243920 # v2.4.2 + uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4 with: results_file: results.sarif results_format: sarif